<?xml version="1.0" encoding="UTF-8"?>
	<oval_definitions
		xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd"
		xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
		xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
		xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5"
		xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
	  <generator>
	      <oval:product_name>Marcus Updateinfo to OVAL Converter</oval:product_name>
	      <oval:schema_version>5.5</oval:schema_version>
	      <oval:timestamp>2023-09-28T05:48:46</oval:timestamp>
	  </generator>
<definitions>
<definition id="oval:org.opensuse.security:def:19990077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-1999-0077</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-1999-0077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0077" source="CVE"/>
    <reference ref_id="SUSE CVE-1999-0077" ref_url="https://www.suse.com/security/cve/CVE-1999-0077" source="SUSE CVE"/>
    <description>
    Predictable TCP sequence numbers allow spoofing.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-01-17"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-1999-0077/">CVE-1999-0077</cve>
	<bugzilla href="https://bugzilla.suse.com/954946">SUSE bug 954946</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:19990195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-1999-0195</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-1999-0195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0195" source="CVE"/>
    <reference ref_id="SUSE CVE-1999-0195" ref_url="https://www.suse.com/security/cve/CVE-1999-0195" source="SUSE CVE"/>
    <description>
    Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-01-17"/>
	<updated date="2023-01-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-1999-0195/">CVE-1999-0195</cve>
	<bugzilla href="https://bugzilla.suse.com/914171">SUSE bug 914171</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009732558" comment="rpcbind is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:19990517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-1999-0517</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-1999-0517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0517" source="CVE"/>
    <reference ref_id="SUSE CVE-1999-0517" ref_url="https://www.suse.com/security/cve/CVE-1999-0517" source="SUSE CVE"/>
    <description>
    An SNMP community name is the default (e.g. public), null, or missing.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-1999-0517/">CVE-1999-0517</cve>
	<bugzilla href="https://bugzilla.suse.com/1207850">SUSE bug 1207850</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009339027" comment="libsnmp30 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334320" comment="net-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337615" comment="net-snmp-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337611" comment="perl-SNMP is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337612" comment="snmp-mibs is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:19990524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-1999-0524</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-1999-0524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0524" source="CVE"/>
    <reference ref_id="SUSE CVE-1999-0524" ref_url="https://www.suse.com/security/cve/CVE-1999-0524" source="SUSE CVE"/>
    <description>
    ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-04-06"/>
	<updated date="2023-04-06"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-1999-0524/">CVE-1999-0524</cve>
	<bugzilla href="https://bugzilla.suse.com/351997">SUSE bug 351997</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20001254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2000-1254</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2000-1254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1254" source="CVE"/>
    <reference ref_id="SUSE CVE-2000-1254" ref_url="https://www.suse.com/security/cve/CVE-2000-1254" source="SUSE CVE"/>
    <description>
    crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2000-1254/">CVE-2000-1254</cve>
	<bugzilla href="https://bugzilla.suse.com/978847">SUSE bug 978847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333944" comment="openssl-1_1 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334865" comment="libopenssl-1_0_0-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333943" comment="openssl-1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334872" comment="libopenssl-1_1-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334873" comment="libopenssl-1_1-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334866" comment="libopenssl1_1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334867" comment="libopenssl1_1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009343863" comment="libopenssl1_1-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009343864" comment="libopenssl1_1-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333944" comment="openssl-1_1 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334872" comment="libopenssl-1_1-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334873" comment="libopenssl-1_1-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334866" comment="libopenssl1_1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334867" comment="libopenssl1_1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009343863" comment="libopenssl1_1-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009343864" comment="libopenssl1_1-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333944" comment="openssl-1_1 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20010405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2001-0405</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2001-0405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0405" source="CVE"/>
    <reference ref_id="SUSE CVE-2001-0405" ref_url="https://www.suse.com/security/cve/CVE-2001-0405" source="SUSE CVE"/>
    <description>
    ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2001-0405/">CVE-2001-0405</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20010851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2001-0851</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2001-0851" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0851" source="CVE"/>
    <reference ref_id="SUSE CVE-2001-0851" ref_url="https://www.suse.com/security/cve/CVE-2001-0851" source="SUSE CVE"/>
    <description>
    Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2001-0851/">CVE-2001-0851</cve>
	<bugzilla href="https://bugzilla.suse.com/1175687">SUSE bug 1175687</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20011267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2001-1267</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2001-1267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1267" source="CVE"/>
    <reference ref_id="SUSE CVE-2001-1267" ref_url="https://www.suse.com/security/cve/CVE-2001-1267" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-09/msg00003.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-18"/>
	<updated date="2023-02-17"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2001-1267/">CVE-2001-1267</cve>
	<bugzilla href="https://bugzilla.suse.com/1203750">SUSE bug 1203750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/299738">SUSE bug 299738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/299745">SUSE bug 299745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/299747">SUSE bug 299747</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727666" comment="tar is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009727666" comment="tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727667" comment="tar-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727668" comment="tar-rmt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20020399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2002-0399</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2002-0399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0399" source="CVE"/>
    <reference ref_id="SUSE CVE-2002-0399" ref_url="https://www.suse.com/security/cve/CVE-2002-0399" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2006:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-09/msg00003.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) "/.." or (2) "./.." string, which removes the leading slash but leaves the "..", a variant of CVE-2001-1267.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-18"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2002-0399/">CVE-2002-0399</cve>
	<bugzilla href="https://bugzilla.suse.com/145081">SUSE bug 145081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/299738">SUSE bug 299738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/299745">SUSE bug 299745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/299747">SUSE bug 299747</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727666" comment="tar is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009727666" comment="tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727667" comment="tar-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727668" comment="tar-rmt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:200220001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2002-20001</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2002-20001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-20001" source="CVE"/>
    <reference ref_id="SUSE CVE-2002-20001" ref_url="https://www.suse.com/security/cve/CVE-2002-20001" source="SUSE CVE"/>
		<reference ref_id="TID000020510" ref_url="https://www.suse.com/support/kb/doc/?id=000020510" source="SUSE-SU"/>
    <description>
    The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2002-20001/">CVE-2002-20001</cve>
	<bugzilla href="https://bugzilla.suse.com/1192815">SUSE bug 1192815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199367">SUSE bug 1199367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20030028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2003-0028</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2003-0028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0028" source="CVE"/>
    <reference ref_id="SUSE CVE-2003-0028" ref_url="https://www.suse.com/security/cve/CVE-2003-0028" source="SUSE CVE"/>
		<reference ref_id="SuSE-SA:2003:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2003-05/msg00003.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-13"/>
	<updated date="2023-07-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2003-0028/">CVE-2003-0028</cve>
	<bugzilla href="https://bugzilla.suse.com/816627">SUSE bug 816627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009659672" comment="libtirpc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337765" comment="libtirpc-netconfig is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337766" comment="libtirpc3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337767" comment="libtirpc3-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20030252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2003-0252</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2003-0252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0252" source="CVE"/>
    <reference ref_id="SUSE CVE-2003-0252" ref_url="https://www.suse.com/security/cve/CVE-2003-0252" source="SUSE CVE"/>
		<reference ref_id="SuSE-SA:2003:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2003-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2003-0252/">CVE-2003-0252</cve>
	<bugzilla href="https://bugzilla.suse.com/42744">SUSE bug 42744</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/42918">SUSE bug 42918</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009667778" comment="nfs-utils is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009667767" comment="nfs-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009667768" comment="nfs-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009667769" comment="nfs-kernel-server is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20031332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2003-1332</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2003-1332" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1332" source="CVE"/>
    <reference ref_id="SUSE CVE-2003-1332" ref_url="https://www.suse.com/security/cve/CVE-2003-1332" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the reply_nttrans function in Samba 2.2.7a and earlier allows remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2003-0201.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2003-1332/">CVE-2003-1332</cve>
	<bugzilla href="https://bugzilla.suse.com/1184864">SUSE bug 1184864</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336017" comment="ctdb is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337885" comment="samba-ceph is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334838" comment="libdcerpc-binding0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334951" comment="libdcerpc-binding0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334980" comment="libdcerpc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334981" comment="libdcerpc-samr-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334982" comment="libdcerpc-samr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334839" comment="libdcerpc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334952" comment="libdcerpc0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334984" comment="libndr-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334985" comment="libndr-krb5pac-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334840" comment="libndr-krb5pac0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334954" comment="libndr-krb5pac0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334986" comment="libndr-nbt-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334841" comment="libndr-nbt0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334955" comment="libndr-nbt0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334987" comment="libndr-standard-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334842" comment="libndr-standard0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334956" comment="libndr-standard0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334843" comment="libndr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334957" comment="libndr0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334988" comment="libnetapi-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334844" comment="libnetapi0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334958" comment="libnetapi0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334991" comment="libsamba-credentials-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334845" comment="libsamba-credentials0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334960" comment="libsamba-credentials0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341004" comment="libsamba-errors-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334846" comment="libsamba-errors0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335571" comment="libsamba-errors0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334992" comment="libsamba-hostconfig-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334847" comment="libsamba-hostconfig0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334961" comment="libsamba-hostconfig0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334989" comment="libsamba-passdb-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334848" comment="libsamba-passdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334959" comment="libsamba-passdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334993" comment="libsamba-policy-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341005" comment="libsamba-policy-python3-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334994" comment="libsamba-policy0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341006" comment="libsamba-policy0-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334995" comment="libsamba-util-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334849" comment="libsamba-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334962" comment="libsamba-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334996" comment="libsamdb-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334850" comment="libsamdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334963" comment="libsamdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334997" comment="libsmbclient-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334851" comment="libsmbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334999" comment="libsmbconf-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334852" comment="libsmbconf0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334966" comment="libsmbconf0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335000" comment="libsmbldap-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338826" comment="libsmbldap2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338827" comment="libsmbldap2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335003" comment="libtevent-util-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334854" comment="libtevent-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334968" comment="libtevent-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335004" comment="libwbclient-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334855" comment="libwbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334969" comment="libwbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341007" comment="samba-ad-dc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335005" comment="samba-core-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341008" comment="samba-dsdb-modules is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341009" comment="samba-libs-python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338828" comment="samba-libs-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341010" comment="samba-python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341011" comment="samba-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334973" comment="samba-winbind-32bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20031605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2003-1605</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2003-1605" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1605" source="CVE"/>
    <reference ref_id="SUSE CVE-2003-1605" ref_url="https://www.suse.com/security/cve/CVE-2003-1605" source="SUSE CVE"/>
    <description>
    curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2003-1605/">CVE-2003-1605</cve>
	<bugzilla href="https://bugzilla.suse.com/1105868">SUSE bug 1105868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333977" comment="curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335174" comment="libcurl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335173" comment="libcurl4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335172" comment="libcurl4-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20040657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-0657</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-0657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0657" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-0657" ref_url="https://www.suse.com/security/cve/CVE-2004-0657" source="SUSE CVE"/>
    <description>
    Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2004-0657/">CVE-2004-0657</cve>
	<bugzilla href="https://bugzilla.suse.com/1173323">SUSE bug 1173323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338821" comment="ntp is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20040790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-0790</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-0790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0790" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-0790" ref_url="https://www.suse.com/security/cve/CVE-2004-0790" source="SUSE CVE"/>
    <description>
    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2004-0790/">CVE-2004-0790</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20040791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-0791</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-0791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0791" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-0791" ref_url="https://www.suse.com/security/cve/CVE-2004-0791" source="SUSE CVE"/>
    <description>
    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2004-0791/">CVE-2004-0791</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20041060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-1060</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-1060" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1060" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-1060" ref_url="https://www.suse.com/security/cve/CVE-2004-1060" source="SUSE CVE"/>
    <description>
    Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2004-1060/">CVE-2004-1060</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20042771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-2771</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-2771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2771" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-2771" ref_url="https://www.suse.com/security/cve/CVE-2004-2771" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1713-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00097.html" source="SUSE-SU"/>
    <description>
    The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2004-2771/">CVE-2004-2771</cve>
	<bugzilla href="https://bugzilla.suse.com/909208">SUSE bug 909208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480839" comment="mailx-12.5-1.87 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0065</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0065" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0065" ref_url="https://www.suse.com/security/cve/CVE-2005-0065" source="SUSE CVE"/>
    <description>
    The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged (aka "TCP sequence number checking"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2005-0065/">CVE-2005-0065</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0066</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0066" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0066" ref_url="https://www.suse.com/security/cve/CVE-2005-0066" source="SUSE CVE"/>
    <description>
    The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged (aka "TCP acknowledgement number checking"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2005-0066/">CVE-2005-0066</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0067</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0067" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0067" ref_url="https://www.suse.com/security/cve/CVE-2005-0067" source="SUSE CVE"/>
    <description>
    The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2005-0067/">CVE-2005-0067</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0068</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0068" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0068" ref_url="https://www.suse.com/security/cve/CVE-2005-0068" source="SUSE CVE"/>
    <description>
    The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2005-0068/">CVE-2005-0068</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0210</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0210" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0210" ref_url="https://www.suse.com/security/cve/CVE-2005-0210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-03/msg00020.html" source="SUSE-SU"/>
    <description>
    Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-0210/">CVE-2005-0210</cve>
	<bugzilla href="https://bugzilla.suse.com/65594">SUSE bug 65594</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0400</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0400" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0400" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0400" ref_url="https://www.suse.com/security/cve/CVE-2005-0400" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:029" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-06/msg00015.html" source="SUSE-SU"/>
    <description>
    The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2005-0400/">CVE-2005-0400</cve>
	<bugzilla href="https://bugzilla.suse.com/75706">SUSE bug 75706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0749</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0749" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0749" ref_url="https://www.suse.com/security/cve/CVE-2005-0749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:029" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-06/msg00015.html" source="SUSE-SU"/>
    <description>
    The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2005-0749/">CVE-2005-0749</cve>
	<bugzilla href="https://bugzilla.suse.com/73837">SUSE bug 73837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20051265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-1265</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-1265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1265" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-1265" ref_url="https://www.suse.com/security/cve/CVE-2005-1265" source="SUSE CVE"/>
    <description>
    The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (kernel crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-1265/">CVE-2005-1265</cve>
	<bugzilla href="https://bugzilla.suse.com/84728">SUSE bug 84728</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20051763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-1763</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-1763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1763" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-1763" ref_url="https://www.suse.com/security/cve/CVE-2005-1763" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:029" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-06/msg00015.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2005-1763/">CVE-2005-1763</cve>
	<bugzilla href="https://bugzilla.suse.com/84078">SUSE bug 84078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20051767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-1767</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-1767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1767" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-1767" ref_url="https://www.suse.com/security/cve/CVE-2005-1767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-08/msg00008.html" source="SUSE-SU"/>
    <description>
    traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops and stack fault exception).
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2005-1767/">CVE-2005-1767</cve>
	<bugzilla href="https://bugzilla.suse.com/88492">SUSE bug 88492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/90500">SUSE bug 90500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20051918" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-1918</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-1918" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1918" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-1918" ref_url="https://www.suse.com/security/cve/CVE-2005-1918" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2006:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".
    </description>
<advisory from="security@suse.de">
	<issued date="2023-01-21"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-1918/">CVE-2005-1918</cve>
	<bugzilla href="https://bugzilla.suse.com/145081">SUSE bug 145081</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727666" comment="tar is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009727666" comment="tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727667" comment="tar-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727668" comment="tar-rmt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20052098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-2098</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-2098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2098" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-2098" ref_url="https://www.suse.com/security/cve/CVE-2005-2098" source="SUSE CVE"/>
    <description>
    The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-2098/">CVE-2005-2098</cve>
	<bugzilla href="https://bugzilla.suse.com/100506">SUSE bug 100506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20052458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-2458</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-2458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2458" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-2458" ref_url="https://www.suse.com/security/cve/CVE-2005-2458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2005:068" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-12/msg00011.html" source="SUSE-SU"/>
    <description>
    inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service (kernel crash) via a compressed file with "improper tables".
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-2458/">CVE-2005-2458</cve>
	<bugzilla href="https://bugzilla.suse.com/100428">SUSE bug 100428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/102323">SUSE bug 102323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/104085">SUSE bug 104085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/114364">SUSE bug 114364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/117169">SUSE bug 117169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/130270">SUSE bug 130270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/132739">SUSE bug 132739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/133577">SUSE bug 133577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/133972">SUSE bug 133972</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20052492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-2492</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-2492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2492" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-2492" ref_url="https://www.suse.com/security/cve/CVE-2005-2492" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:068" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-12/msg00011.html" source="SUSE-SU"/>
    <description>
    The raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-06-26"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2005-2492/">CVE-2005-2492</cve>
	<bugzilla href="https://bugzilla.suse.com/114365">SUSE bug 114365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20053623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-3623</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-3623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3623" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-3623" ref_url="https://www.suse.com/security/cve/CVE-2005-3623" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2006:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-02/msg00021.html" source="SUSE-SU"/>
    <description>
    nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2005-3623/">CVE-2005-3623</cve>
	<bugzilla href="https://bugzilla.suse.com/139411">SUSE bug 139411</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20054881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-4881</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-4881" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4881" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-4881" ref_url="https://www.suse.com/security/cve/CVE-2005-4881" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
    <description>
    The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-04-05"/>
	<updated date="2023-04-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-4881/">CVE-2005-4881</cve>
	<bugzilla href="https://bugzilla.suse.com/536467">SUSE bug 536467</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20054900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-4900</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-4900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4900" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-4900" ref_url="https://www.suse.com/security/cve/CVE-2005-4900" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006709.html" source="SUSE-SU"/>
    <description>
    SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2.  NOTE: this CVE exists to provide a common identifier for referencing this SHA-1 issue; the existence of an identifier is not, by itself, a technology recommendation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2005-4900/">CVE-2005-4900</cve>
	<bugzilla href="https://bugzilla.suse.com/1026646">SUSE bug 1026646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1026936">SUSE bug 1026936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042640">SUSE bug 1042640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150998">SUSE bug 1150998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481138" comment="git-core-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480714" comment="libsha1detectcoll-devel-1.0.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480715" comment="libsha1detectcoll1-1.0.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487750" comment="git-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487751" comment="git-arch-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487752" comment="git-cvs-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487753" comment="git-daemon-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487754" comment="git-doc-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487755" comment="git-email-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487756" comment="git-gui-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487757" comment="git-svn-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487758" comment="git-web-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487759" comment="gitk-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487772" comment="libgit2-26-0.26.8-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487773" comment="libgit2-devel-0.26.8-3.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20060855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-0855</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-0855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0855" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-0855" ref_url="https://www.suse.com/security/cve/CVE-2006-0855" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2006:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2006:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-03/msg00017.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-0855/">CVE-2006-0855</cve>
	<bugzilla href="https://bugzilla.suse.com/153057">SUSE bug 153057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480979" comment="zoo-2.10-1.29 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:200620001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-20001</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-20001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-20001" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-20001" ref_url="https://www.suse.com/security/cve/CVE-2006-20001" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2023:330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013700.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0322-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-February/027580.html" source="SUSE-SU"/>
    <description>
    A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.

This issue affects Apache HTTP Server 2.4.54 and earlier.

    </description>
<advisory from="security@suse.de">
	<issued date="2023-01-19"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2006-20001/">CVE-2006-20001</cve>
	<bugzilla href="https://bugzilla.suse.com/1207247">SUSE bug 1207247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009736323" comment="apache2-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736324" comment="apache2-devel-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736325" comment="apache2-doc-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736326" comment="apache2-prefork-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736327" comment="apache2-utils-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736328" comment="apache2-worker-2.4.33-150000.3.72.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009736493" comment="apache2-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736494" comment="apache2-devel-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736325" comment="apache2-doc-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736495" comment="apache2-prefork-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736496" comment="apache2-utils-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736497" comment="apache2-worker-2.4.33-150000.3.72.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009737895" comment="apache2-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009737896" comment="apache2-devel-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736325" comment="apache2-doc-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009737897" comment="apache2-prefork-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009737898" comment="apache2-utils-2.4.33-150000.3.72.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009737899" comment="apache2-worker-2.4.33-150000.3.72.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20062607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-2607</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-2607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2607" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-2607" ref_url="https://www.suse.com/security/cve/CVE-2006-2607" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-05/msg00017.html" source="SUSE-SU"/>
    <description>
    do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-2607/">CVE-2006-2607</cve>
	<bugzilla href="https://bugzilla.suse.com/178863">SUSE bug 178863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/537178">SUSE bug 537178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480153" comment="cron-4.2-4.45 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480154" comment="cronie-1.5.1-4.45 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20063635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-3635</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-3635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3635" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-3635" ref_url="https://www.suse.com/security/cve/CVE-2006-3635" source="SUSE CVE"/>
    <description>
    The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service (stack consumption and system crash) via a crafted application that leverages the mishandling of invalid Register Stack Engine (RSE) state.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-08"/>
	<updated date="2023-07-08"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-3635/">CVE-2006-3635</cve>
	<bugzilla href="https://bugzilla.suse.com/199440">SUSE bug 199440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/199441">SUSE bug 199441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20064484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-4484</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-4484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4484" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-4484" ref_url="https://www.suse.com/security/cve/CVE-2006-4484" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2006-4484/">CVE-2006-4484</cve>
	<bugzilla href="https://bugzilla.suse.com/200181">SUSE bug 200181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/355864">SUSE bug 355864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/356187">SUSE bug 356187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/357978">SUSE bug 357978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/372642">SUSE bug 372642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/374257">SUSE bug 374257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/386009">SUSE bug 386009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/709852">SUSE bug 709852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486523" comment="perl-Tk-804.034-1.44 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487701" comment="perl-Tk-devel-804.034-1.44 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20064623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-4623</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-4623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4623" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-4623" ref_url="https://www.suse.com/security/cve/CVE-2006-4623" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:079" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-12/msg00018.html" source="SUSE-SU"/>
    <description>
    The Unidirectional Lightweight Encapsulation (ULE) decapsulation component in dvb-core/dvb_net.c in the dvb driver in the Linux kernel 2.6.17.8 allows remote attackers to cause a denial of service (crash) via an SNDU length of 0 in a ULE packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-4623/">CVE-2006-4623</cve>
	<bugzilla href="https://bugzilla.suse.com/201429">SUSE bug 201429</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20064814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-4814</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-4814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4814" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-4814" ref_url="https://www.suse.com/security/cve/CVE-2006-4814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-02/msg00009.html" source="SUSE-SU"/>
    <description>
    The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-4814/">CVE-2006-4814</cve>
	<bugzilla href="https://bugzilla.suse.com/207667">SUSE bug 207667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20065701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-5701</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-5701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5701" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-5701" ref_url="https://www.suse.com/security/cve/CVE-2006-5701" source="SUSE CVE"/>
    <description>
    Double free vulnerability in squashfs module in the Linux kernel 2.6.x, as used in Fedora Core 5 and possibly other distributions, allows local users to cause a denial of service by mounting a crafted squashfs filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-02"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-5701/">CVE-2006-5701</cve>
	<bugzilla href="https://bugzilla.suse.com/218162">SUSE bug 218162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20065751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-5751</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-5751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5751" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-5751" ref_url="https://www.suse.com/security/cve/CVE-2006-5751" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:079" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00009.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the get_fdb_entries function in net/bridge/br_ioctl.c in the Linux kernel before 2.6.18.4 allows local users to execute arbitrary code via a large maxnum value in an ioctl request.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-5751/">CVE-2006-5751</cve>
	<bugzilla href="https://bugzilla.suse.com/222656">SUSE bug 222656</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20065794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-5794</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-5794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5794" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-5794" ref_url="https://www.suse.com/security/cve/CVE-2006-5794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2006:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-11/msg00020.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-5794/">CVE-2006-5794</cve>
	<bugzilla href="https://bugzilla.suse.com/219115">SUSE bug 219115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20066077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-6077</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-6077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6077" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-6077" ref_url="https://www.suse.com/security/cve/CVE-2006-6077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00007.html" source="SUSE-SU"/>
    <description>
    The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-6077/">CVE-2006-6077</cve>
	<bugzilla href="https://bugzilla.suse.com/244923">SUSE bug 244923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550618">SUSE bug 550618</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20066106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-6106</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-6106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6106" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-6106" ref_url="https://www.suse.com/security/cve/CVE-2006-6106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:035" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-6106/">CVE-2006-6106</cve>
	<bugzilla href="https://bugzilla.suse.com/227603">SUSE bug 227603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20067246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-7246</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-7246" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7246" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-7246" ref_url="https://www.suse.com/security/cve/CVE-2006-7246" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00025.html" source="SUSE-SU"/>
    <description>
    NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2006-7246/">CVE-2006-7246</cve>
	<bugzilla href="https://bugzilla.suse.com/1047509">SUSE bug 1047509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047511">SUSE bug 1047511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/574266">SUSE bug 574266</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/777228">SUSE bug 777228</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489051" comment="NetworkManager-lang-1.10.6-5.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481450" comment="libnm0-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481451" comment="typelib-1_0-NM-1_0-1.10.6-5.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486571" comment="NetworkManager-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486572" comment="NetworkManager-devel-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486573" comment="libnm-glib-vpn1-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486574" comment="libnm-glib4-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486575" comment="libnm-util2-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486576" comment="typelib-1_0-NMClient-1_0-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486577" comment="typelib-1_0-NetworkManager-1_0-1.10.6-5.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20067250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-7250</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-7250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7250" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-7250" ref_url="https://www.suse.com/security/cve/CVE-2006-7250" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0414-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00039.html" source="SUSE-SU"/>
    <description>
    The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-7250/">CVE-2006-7250</cve>
	<bugzilla href="https://bugzilla.suse.com/748738">SUSE bug 748738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883307">SUSE bug 883307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0005</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0005" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0005" ref_url="https://www.suse.com/security/cve/CVE-2007-0005" source="SUSE CVE"/>
    <description>
    Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-0005/">CVE-2007-0005</cve>
	<bugzilla href="https://bugzilla.suse.com/242996">SUSE bug 242996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0008</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0008" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0008" ref_url="https://www.suse.com/security/cve/CVE-2007-0008" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00007.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, SeaMonkey before 1.0.8, Thunderbird before 1.5.0.10, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via a crafted SSLv2 server message containing a public key that is too short to encrypt the "Master Secret", which results in a heap-based overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-06"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-0008/">CVE-2007-0008</cve>
	<bugzilla href="https://bugzilla.suse.com/244923">SUSE bug 244923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0009</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0009" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0009" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0009" ref_url="https://www.suse.com/security/cve/CVE-2007-0009" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00007.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-0009/">CVE-2007-0009</cve>
	<bugzilla href="https://bugzilla.suse.com/244923">SUSE bug 244923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0775</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0775" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0775" ref_url="https://www.suse.com/security/cve/CVE-2007-0775" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00007.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allow remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via certain vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-0775/">CVE-2007-0775</cve>
	<bugzilla href="https://bugzilla.suse.com/244923">SUSE bug 244923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0776</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0776" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0776" ref_url="https://www.suse.com/security/cve/CVE-2007-0776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00007.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to execute arbitrary code via a large stroke-width attribute in the clipPath element in an SVG file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2007-0776/">CVE-2007-0776</cve>
	<bugzilla href="https://bugzilla.suse.com/244923">SUSE bug 244923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0777</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0777" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0777" ref_url="https://www.suse.com/security/cve/CVE-2007-0777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00007.html" source="SUSE-SU"/>
    <description>
    The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2007-0777/">CVE-2007-0777</cve>
	<bugzilla href="https://bugzilla.suse.com/244923">SUSE bug 244923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070780" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0780</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0780" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0780" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0780" ref_url="https://www.suse.com/security/cve/CVE-2007-0780" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00007.html" source="SUSE-SU"/>
    <description>
    browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the requesting URI to identify child windows, which allows remote attackers to conduct cross-site scripting (XSS) attacks by opening a blocked popup originating from a javascript: URI in combination with multiple frames having the same data: URI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-0780/">CVE-2007-0780</cve>
	<bugzilla href="https://bugzilla.suse.com/244923">SUSE bug 244923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0800</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0800" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0800" ref_url="https://www.suse.com/security/cve/CVE-2007-0800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00007.html" source="SUSE-SU"/>
    <description>
    Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-0800/">CVE-2007-0800</cve>
	<bugzilla href="https://bugzilla.suse.com/244923">SUSE bug 244923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0899</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0899" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0899" ref_url="https://www.suse.com/security/cve/CVE-2007-0899" source="SUSE CVE"/>
    <description>
    There is a possible heap overflow in libclamav/fsg.c before 0.100.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2007-0899/">CVE-2007-0899</cve>
	<bugzilla href="https://bugzilla.suse.com/1156183">SUSE bug 1156183</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334331" comment="clamav is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659632" comment="clamav-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659635" comment="libclamav9 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659636" comment="libfreshclam2 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0981</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0981" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0981" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0981" ref_url="https://www.suse.com/security/cve/CVE-2007-0981" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00007.html" source="SUSE-SU"/>
    <description>
    Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname (location.hostname) DOM property, due to interactions with DNS resolver code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-05"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-0981/">CVE-2007-0981</cve>
	<bugzilla href="https://bugzilla.suse.com/244923">SUSE bug 244923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0995</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0995" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0995" ref_url="https://www.suse.com/security/cve/CVE-2007-0995" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00007.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-0995/">CVE-2007-0995</cve>
	<bugzilla href="https://bugzilla.suse.com/244923">SUSE bug 244923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0996</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0996" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0996" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0996" ref_url="https://www.suse.com/security/cve/CVE-2007-0996" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00007.html" source="SUSE-SU"/>
    <description>
    The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-0996/">CVE-2007-0996</cve>
	<bugzilla href="https://bugzilla.suse.com/244923">SUSE bug 244923</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20071496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-1496</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-1496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1496" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-1496" ref_url="https://www.suse.com/security/cve/CVE-2007-1496" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-07/msg00005.html" source="SUSE-SU"/>
    <description>
    nfnetlink_log in netfilter in the Linux kernel before 2.6.20.3 allows attackers to cause a denial of service (crash) via unspecified vectors involving the (1) nfulnl_recv_config function, (2) using "multiple packets per netlink message", and (3) bridged packets, which trigger a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-1496/">CVE-2007-1496</cve>
	<bugzilla href="https://bugzilla.suse.com/270458">SUSE bug 270458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20071497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-1497</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-1497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1497" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-1497" ref_url="https://www.suse.com/security/cve/CVE-2007-1497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-07/msg00005.html" source="SUSE-SU"/>
    <description>
    nf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IP_CT_ESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-1497/">CVE-2007-1497</cve>
	<bugzilla href="https://bugzilla.suse.com/268298">SUSE bug 268298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/270460">SUSE bug 270460</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20071669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-1669</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-1669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1669" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-1669" ref_url="https://www.suse.com/security/cve/CVE-2007-1669" source="SUSE CVE"/>
    <description>
    zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and (3) AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-1669/">CVE-2007-1669</cve>
	<bugzilla href="https://bugzilla.suse.com/271781">SUSE bug 271781</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480979" comment="zoo-2.10-1.29 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20071701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-1701</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-1701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1701" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-1701" ref_url="https://www.suse.com/security/cve/CVE-2007-1701" source="SUSE CVE"/>
    <description>
    PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-1701/">CVE-2007-1701</cve>
	<bugzilla href="https://bugzilla.suse.com/257402">SUSE bug 257402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781768" comment="php7-embed is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20071825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-1825</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-1825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1825" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-1825" ref_url="https://www.suse.com/security/cve/CVE-2007-1825" source="SUSE CVE"/>
    <description>
    Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-1825/">CVE-2007-1825</cve>
	<bugzilla href="https://bugzilla.suse.com/259751">SUSE bug 259751</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781768" comment="php7-embed is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20072052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-2052</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-2052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2052" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-2052" ref_url="https://www.suse.com/security/cve/CVE-2007-2052" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2007:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-2052/">CVE-2007-2052</cve>
	<bugzilla href="https://bugzilla.suse.com/276889">SUSE bug 276889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20072721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-2721</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-2721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2721" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-2721" ref_url="https://www.suse.com/security/cve/CVE-2007-2721" source="SUSE CVE"/>
    <description>
    The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-2721/">CVE-2007-2721</cve>
	<bugzilla href="https://bugzilla.suse.com/258253">SUSE bug 258253</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/339731">SUSE bug 339731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/340138">SUSE bug 340138</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334003" comment="ghostscript is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335323" comment="ghostscript-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335322" comment="ghostscript-x11 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20072875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-2875</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-2875" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2875" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-2875" ref_url="https://www.suse.com/security/cve/CVE-2007-2875" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the cpuset_tasks_read function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-09"/>
	<updated date="2023-07-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-2875/">CVE-2007-2875</cve>
	<bugzilla href="https://bugzilla.suse.com/280819">SUSE bug 280819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20072878" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-2878</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-2878" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2878" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-2878" ref_url="https://www.suse.com/security/cve/CVE-2007-2878" source="SUSE CVE"/>
    <description>
    The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kernel_dirent struct and cause a denial of service (system crash) via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-2878/">CVE-2007-2878</cve>
	<bugzilla href="https://bugzilla.suse.com/280888">SUSE bug 280888</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3104</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3104" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3104" ref_url="https://www.suse.com/security/cve/CVE-2007-3104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html" source="SUSE-SU"/>
    <description>
    The sysfs_readdir function in the Linux kernel 2.6, as used in Red Hat Enterprise Linux (RHEL) 4.5 and other distributions, allows users to cause a denial of service (kernel OOPS) by dereferencing a null pointer to an inode in a dentry.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-21"/>
	<updated date="2023-05-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3104/">CVE-2007-3104</cve>
	<bugzilla href="https://bugzilla.suse.com/329758">SUSE bug 329758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3107</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3107" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3107" ref_url="https://www.suse.com/security/cve/CVE-2007-3107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00000.html" source="SUSE-SU"/>
    <description>
    The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-3107/">CVE-2007-3107</cve>
	<bugzilla href="https://bugzilla.suse.com/290622">SUSE bug 290622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/329765">SUSE bug 329765</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3126</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3126" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3126" ref_url="https://www.suse.com/security/cve/CVE-2007-3126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002784.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0994-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00046.html" source="SUSE-SU"/>
    <description>
    Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-3126/">CVE-2007-3126</cve>
	<bugzilla href="https://bugzilla.suse.com/1032241">SUSE bug 1032241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488900" comment="gimp-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488901" comment="gimp-devel-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488902" comment="gimp-lang-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488903" comment="gimp-plugins-python-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488904" comment="libgimp-2_0-0-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488905" comment="libgimpui-2_0-0-2.8.22-3.42 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3513</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3513" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3513" ref_url="https://www.suse.com/security/cve/CVE-2007-3513" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00000.html" source="SUSE-SU"/>
    <description>
    The lcd_write function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of memory used by a caller, which allows local users to cause a denial of service (memory consumption).
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3513/">CVE-2007-3513</cve>
	<bugzilla href="https://bugzilla.suse.com/293092">SUSE bug 293092</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073656" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3656</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3656" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3656" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3656" ref_url="https://www.suse.com/security/cve/CVE-2007-3656" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3656/">CVE-2007-3656</cve>
	<bugzilla href="https://bugzilla.suse.com/288115">SUSE bug 288115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3670</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3670" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3670" ref_url="https://www.suse.com/security/cve/CVE-2007-3670" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe.  NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE's opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a "defense in depth" fix that will "prevent IE from sending Firefox malicious data."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3670/">CVE-2007-3670</cve>
	<bugzilla href="https://bugzilla.suse.com/288115">SUSE bug 288115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3719</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3719" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3719" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3719" ref_url="https://www.suse.com/security/cve/CVE-2007-3719" source="SUSE CVE"/>
    <description>
    The process scheduler in the Linux kernel 2.6.16 gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service (CPU consumption), as described in "Secretly Monopolizing the CPU Without Superuser Privileges."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-3719/">CVE-2007-3719</cve>
	<bugzilla href="https://bugzilla.suse.com/291701">SUSE bug 291701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3734</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3734" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3734" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3734" ref_url="https://www.suse.com/security/cve/CVE-2007-3734" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2007-3734/">CVE-2007-3734</cve>
	<bugzilla href="https://bugzilla.suse.com/288115">SUSE bug 288115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3735</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3735" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3735" ref_url="https://www.suse.com/security/cve/CVE-2007-3735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2007-3735/">CVE-2007-3735</cve>
	<bugzilla href="https://bugzilla.suse.com/288115">SUSE bug 288115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3736</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3736" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3736" ref_url="https://www.suse.com/security/cve/CVE-2007-3736" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary web script "into another site's context" via a "timing issue" involving the (1) addEventListener or (2) setTimeout function, probably by setting events that activate after the context has changed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-06"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3736/">CVE-2007-3736</cve>
	<bugzilla href="https://bugzilla.suse.com/288115">SUSE bug 288115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3737</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3737" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3737" ref_url="https://www.suse.com/security/cve/CVE-2007-3737" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2007-3737/">CVE-2007-3737</cve>
	<bugzilla href="https://bugzilla.suse.com/288115">SUSE bug 288115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3738</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3738" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3738" ref_url="https://www.suse.com/security/cve/CVE-2007-3738" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code via a crafted XPCNativeWrapper.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2007-3738/">CVE-2007-3738</cve>
	<bugzilla href="https://bugzilla.suse.com/288115">SUSE bug 288115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3851</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3851" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3851" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3851" ref_url="https://www.suse.com/security/cve/CVE-2007-3851" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00000.html" source="SUSE-SU"/>
    <description>
    The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager (DRM) to write to arbitrary memory locations and gain privileges via a crafted batchbuffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3851/">CVE-2007-3851</cve>
	<bugzilla href="https://bugzilla.suse.com/298309">SUSE bug 298309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3852</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3852" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3852" ref_url="https://www.suse.com/security/cve/CVE-2007-3852" source="SUSE CVE"/>
    <description>
    The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3852/">CVE-2007-3852</cve>
	<bugzilla href="https://bugzilla.suse.com/298308">SUSE bug 298308</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334321" comment="sysstat is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337619" comment="sysstat-isag is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3996</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3996" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3996" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3996" ref_url="https://www.suse.com/security/cve/CVE-2007-3996" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3996/">CVE-2007-3996</cve>
	<bugzilla href="https://bugzilla.suse.com/307272">SUSE bug 307272</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781768" comment="php7-embed is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4133</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4133" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4133" ref_url="https://www.suse.com/security/cve/CVE-2007-4133" source="SUSE CVE"/>
    <description>
    The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which allows local users to cause a denial of service (panic) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-4133/">CVE-2007-4133</cve>
	<bugzilla href="https://bugzilla.suse.com/328899">SUSE bug 328899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4308</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4308" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4308" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4308" ref_url="https://www.suse.com/security/cve/CVE-2007-4308" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html" source="SUSE-SU"/>
    <description>
    The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-4308/">CVE-2007-4308</cve>
	<bugzilla href="https://bugzilla.suse.com/326270">SUSE bug 326270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/329764">SUSE bug 329764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4559</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4559" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4559" ref_url="https://www.suse.com/security/cve/CVE-2007-4559" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2023:1833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1946-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015233.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015486.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2400-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015596.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2466-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:3070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016268.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2023:474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2023:476-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2023:549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2463-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029776.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2509-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029881.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2517-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2778-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2884-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015532.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2957-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015621.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-01"/>
	<updated date="2023-09-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2007-4559/">CVE-2007-4559</cve>
	<bugzilla href="https://bugzilla.suse.com/1203750">SUSE bug 1203750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204077">SUSE bug 1204077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4567</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4567" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4567" ref_url="https://www.suse.com/security/cve/CVE-2007-4567" source="SUSE CVE"/>
    <description>
    The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-4567/">CVE-2007-4567</cve>
	<bugzilla href="https://bugzilla.suse.com/307626">SUSE bug 307626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/570608">SUSE bug 570608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4571</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4571" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4571" ref_url="https://www.suse.com/security/cve/CVE-2007-4571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00000.html" source="SUSE-SU"/>
    <description>
    The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2007-4571/">CVE-2007-4571</cve>
	<bugzilla href="https://bugzilla.suse.com/328404">SUSE bug 328404</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4670</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4670" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4670" ref_url="https://www.suse.com/security/cve/CVE-2007-4670" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-4670/">CVE-2007-4670</cve>
	<bugzilla href="https://bugzilla.suse.com/307272">SUSE bug 307272</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781768" comment="php7-embed is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4774</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4774" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4774" ref_url="https://www.suse.com/security/cve/CVE-2007-4774" source="SUSE CVE"/>
    <description>
    The Linux kernel before 2.4.36-rc1 has a race condition. It was possible to bypass systrace policies by flooding the ptraced process with SIGCONT signals, which can can wake up a PTRACED process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2007-4774/">CVE-2007-4774</cve>
	<bugzilla href="https://bugzilla.suse.com/1161116">SUSE bug 1161116</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20075899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-5899</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-5899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5899" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-5899" ref_url="https://www.suse.com/security/cve/CVE-2007-5899" source="SUSE CVE"/>
    <description>
    The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-5899/">CVE-2007-5899</cve>
	<bugzilla href="https://bugzilla.suse.com/341273">SUSE bug 341273</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781768" comment="php7-embed is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20075966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-5966</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-5966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5966" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-5966" ref_url="https://www.suse.com/security/cve/CVE-2007-5966" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="TID7002558" ref_url="https://www.suse.com/support/kb/doc?id=7002558" source="SUSE-SU"/>
    <description>
    Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-5966/">CVE-2007-5966</cve>
	<bugzilla href="https://bugzilla.suse.com/347262">SUSE bug 347262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/512584">SUSE bug 512584</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20075970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-5970</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-5970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5970" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-5970" ref_url="https://www.suse.com/security/cve/CVE-2007-5970" source="SUSE CVE"/>
    <description>
    MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of table-level DATA DIRECTORY and INDEX DIRECTORY options when creating a partitioned table with the same name as a table on which the user lacks privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-5970/">CVE-2007-5970</cve>
	<bugzilla href="https://bugzilla.suse.com/348307">SUSE bug 348307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6063</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6063" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6063" ref_url="https://www.suse.com/security/cve/CVE-2007-6063" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-6063/">CVE-2007-6063</cve>
	<bugzilla href="https://bugzilla.suse.com/343210">SUSE bug 343210</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6206</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6206" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6206" ref_url="https://www.suse.com/security/cve/CVE-2007-6206" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
    <description>
    The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-6206/">CVE-2007-6206</cve>
	<bugzilla href="https://bugzilla.suse.com/342686">SUSE bug 342686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6209</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6209" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6209" ref_url="https://www.suse.com/security/cve/CVE-2007-6209" source="SUSE CVE"/>
    <description>
    Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-6209/">CVE-2007-6209</cve>
	<bugzilla href="https://bugzilla.suse.com/346454">SUSE bug 346454</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339511" comment="zsh is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076716" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6716</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6716" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6716" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6716" ref_url="https://www.suse.com/security/cve/CVE-2007-6716" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-08"/>
	<updated date="2023-07-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2007-6716/">CVE-2007-6716</cve>
	<bugzilla href="https://bugzilla.suse.com/422963">SUSE bug 422963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6762</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6762" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6762" ref_url="https://www.suse.com/security/cve/CVE-2007-6762" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c where it is possible to overflow the doi_def-&gt;tags[] array.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2007-6762/">CVE-2007-6762</cve>
	<bugzilla href="https://bugzilla.suse.com/1143172">SUSE bug 1143172</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0007</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0007" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0007" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0007" ref_url="https://www.suse.com/security/cve/CVE-2008-0007" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html" source="SUSE-SU"/>
    <description>
    Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-0007/">CVE-2008-0007</cve>
	<bugzilla href="https://bugzilla.suse.com/353207">SUSE bug 353207</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0009</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0009" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0009" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0009" ref_url="https://www.suse.com/security/cve/CVE-2008-0009" source="SUSE CVE"/>
    <description>
    The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-0009/">CVE-2008-0009</cve>
	<bugzilla href="https://bugzilla.suse.com/358006">SUSE bug 358006</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0016</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0016" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0016" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0016" ref_url="https://www.suse.com/security/cve/CVE-2008-0016" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-0016/">CVE-2008-0016</cve>
	<bugzilla href="https://bugzilla.suse.com/429179">SUSE bug 429179</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0017</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0017" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0017" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0017" ref_url="https://www.suse.com/security/cve/CVE-2008-0017" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:055" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html" source="SUSE-SU"/>
    <description>
    The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-0017/">CVE-2008-0017</cve>
	<bugzilla href="https://bugzilla.suse.com/439841">SUSE bug 439841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/445573">SUSE bug 445573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0304</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0304" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0304" ref_url="https://www.suse.com/security/cve/CVE-2008-0304" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-0304/">CVE-2008-0304</cve>
	<bugzilla href="https://bugzilla.suse.com/354469">SUSE bug 354469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0352</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0352" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0352" ref_url="https://www.suse.com/security/cve/CVE-2008-0352" source="SUSE CVE"/>
    <description>
    The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6 packet, possibly involving the Jumbo Payload hop-by-hop option (jumbogram).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-0352/">CVE-2008-0352</cve>
	<bugzilla href="https://bugzilla.suse.com/307626">SUSE bug 307626</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0412</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0412" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0412" ref_url="https://www.suse.com/security/cve/CVE-2008-0412" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-0412/">CVE-2008-0412</cve>
	<bugzilla href="https://bugzilla.suse.com/354469">SUSE bug 354469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0414</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0414" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0414" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0414" ref_url="https://www.suse.com/security/cve/CVE-2008-0414" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-0414/">CVE-2008-0414</cve>
	<bugzilla href="https://bugzilla.suse.com/354469">SUSE bug 354469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0415</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0415" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0415" ref_url="https://www.suse.com/security/cve/CVE-2008-0415" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-0415/">CVE-2008-0415</cve>
	<bugzilla href="https://bugzilla.suse.com/354469">SUSE bug 354469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0417</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0417" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0417" ref_url="https://www.suse.com/security/cve/CVE-2008-0417" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html" source="SUSE-SU"/>
    <description>
    CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-0417/">CVE-2008-0417</cve>
	<bugzilla href="https://bugzilla.suse.com/354469">SUSE bug 354469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0418</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0418" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0418" ref_url="https://www.suse.com/security/cve/CVE-2008-0418" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "flat" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-0418/">CVE-2008-0418</cve>
	<bugzilla href="https://bugzilla.suse.com/354469">SUSE bug 354469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0419</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0419" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0419" ref_url="https://www.suse.com/security/cve/CVE-2008-0419" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-0419/">CVE-2008-0419</cve>
	<bugzilla href="https://bugzilla.suse.com/354469">SUSE bug 354469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0591</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0591" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0591" ref_url="https://www.suse.com/security/cve/CVE-2008-0591" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the "dialog refocus bug" or "ffclick2".
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-0591/">CVE-2008-0591</cve>
	<bugzilla href="https://bugzilla.suse.com/354469">SUSE bug 354469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0592</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0592" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0592" ref_url="https://www.suse.com/security/cve/CVE-2008-0592" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a "Content-Disposition: attachment" and an invalid "Content-Type: plain/text," which prevents Firefox from rendering future plain text files within the browser.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-0592/">CVE-2008-0592</cve>
	<bugzilla href="https://bugzilla.suse.com/354469">SUSE bug 354469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0593</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0593" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0593" ref_url="https://www.suse.com/security/cve/CVE-2008-0593" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html" source="SUSE-SU"/>
    <description>
    Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-0593/">CVE-2008-0593</cve>
	<bugzilla href="https://bugzilla.suse.com/354469">SUSE bug 354469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0594</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0594" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0594" ref_url="https://www.suse.com/security/cve/CVE-2008-0594" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-0594/">CVE-2008-0594</cve>
	<bugzilla href="https://bugzilla.suse.com/354469">SUSE bug 354469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0674</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0674" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0674" ref_url="https://www.suse.com/security/cve/CVE-2008-0674" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-0674/">CVE-2008-0674</cve>
	<bugzilla href="https://bugzilla.suse.com/359153">SUSE bug 359153</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335823" comment="libpcre1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335826" comment="libpcre1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335824" comment="libpcre16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335825" comment="libpcrecpp0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335827" comment="libpcrecpp0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335828" comment="libpcreposix0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335829" comment="pcre-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335831" comment="pcre-tools is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1367</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1367" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1367" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1367" ref_url="https://www.suse.com/security/cve/CVE-2008-1367" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html" source="SUSE-SU"/>
    <description>
    gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1367/">CVE-2008-1367</cve>
	<bugzilla href="https://bugzilla.suse.com/369911">SUSE bug 369911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/372038">SUSE bug 372038</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1420</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1420" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1420" ref_url="https://www.suse.com/security/cve/CVE-2008-1420" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers a heap overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1420/">CVE-2008-1420</cve>
	<bugzilla href="https://bugzilla.suse.com/372246">SUSE bug 372246</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481532" comment="libvorbis-devel-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1483</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1483" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1483" ref_url="https://www.suse.com/security/cve/CVE-2008-1483" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004564.html" source="SUSE-SU"/>
		<reference ref_id="TID7005435" ref_url="https://www.suse.com/support/kb/doc/?id=7005435" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3243-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00032.html" source="SUSE-SU"/>
    <description>
    OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2008-1483/">CVE-2008-1483</cve>
	<bugzilla href="https://bugzilla.suse.com/1069509">SUSE bug 1069509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/373527">SUSE bug 373527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/585630">SUSE bug 585630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/647633">SUSE bug 647633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/706386">SUSE bug 706386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655193" comment="openssh-askpass-gnome is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1721</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1721" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1721" ref_url="https://www.suse.com/security/cve/CVE-2008-1721" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1721/">CVE-2008-1721</cve>
	<bugzilla href="https://bugzilla.suse.com/379044">SUSE bug 379044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2051</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2051" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2051" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2051" ref_url="https://www.suse.com/security/cve/CVE-2008-2051" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html" source="SUSE-SU"/>
    <description>
    The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-2051/">CVE-2008-2051</cve>
	<bugzilla href="https://bugzilla.suse.com/386632">SUSE bug 386632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/393287">SUSE bug 393287</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781768" comment="php7-embed is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082315" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2315</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2315" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2315" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2315" ref_url="https://www.suse.com/security/cve/CVE-2008-2315" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2315/">CVE-2008-2315</cve>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/443653">SUSE bug 443653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2316</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2316" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2316" ref_url="https://www.suse.com/security/cve/CVE-2008-2316" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2316/">CVE-2008-2316</cve>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2358</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2358" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2358" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2358" ref_url="https://www.suse.com/security/cve/CVE-2008-2358" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-12"/>
	<updated date="2023-07-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2358/">CVE-2008-2358</cve>
	<bugzilla href="https://bugzilla.suse.com/387819">SUSE bug 387819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2365</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2365" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2365" ref_url="https://www.suse.com/security/cve/CVE-2008-2365" source="SUSE CVE"/>
    <description>
    Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &amp;dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-2365/">CVE-2008-2365</cve>
	<bugzilla href="https://bugzilla.suse.com/404288">SUSE bug 404288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2544</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2544" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2544" ref_url="https://www.suse.com/security/cve/CVE-2008-2544" source="SUSE CVE"/>
    <description>
    Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2008-2544/">CVE-2008-2544</cve>
	<bugzilla href="https://bugzilla.suse.com/1189500">SUSE bug 1189500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2750</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2750" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2750" ref_url="https://www.suse.com/security/cve/CVE-2008-2750" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html" source="SUSE-SU"/>
    <description>
    The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel 2.6 before 2.6.26-rc6 allows remote attackers to cause a denial of service (kernel heap memory corruption and system crash) and possibly have unspecified other impact via a crafted PPPOL2TP packet that results in a large value for a certain length variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2750/">CVE-2008-2750</cve>
	<bugzilla href="https://bugzilla.suse.com/400874">SUSE bug 400874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2812</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2812" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2812" ref_url="https://www.suse.com/security/cve/CVE-2008-2812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:035" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2008-2812/">CVE-2008-2812</cve>
	<bugzilla href="https://bugzilla.suse.com/1175688">SUSE bug 1175688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/405017">SUSE bug 405017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2826</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2826" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2826" ref_url="https://www.suse.com/security/cve/CVE-2008-2826" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the sctp_getsockopt_local_addrs_old function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service (resource consumption and system outage) via vectors involving a large addr_num field in an sctp_getaddrs_old data structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-09"/>
	<updated date="2023-07-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-2826/">CVE-2008-2826</cve>
	<bugzilla href="https://bugzilla.suse.com/402607">SUSE bug 402607</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2931</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2931" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2931" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2931" ref_url="https://www.suse.com/security/cve/CVE-2008-2931" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:035" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2008-2931/">CVE-2008-2931</cve>
	<bugzilla href="https://bugzilla.suse.com/1175780">SUSE bug 1175780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/407428">SUSE bug 407428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2934</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2934" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2934" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2934" ref_url="https://www.suse.com/security/cve/CVE-2008-2934" source="SUSE CVE"/>
    <description>
    Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-2934/">CVE-2008-2934</cve>
	<bugzilla href="https://bugzilla.suse.com/407573">SUSE bug 407573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3142</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3142" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3142" ref_url="https://www.suse.com/security/cve/CVE-2008-3142" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3142/">CVE-2008-3142</cve>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3143</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3143" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3143" ref_url="https://www.suse.com/security/cve/CVE-2008-3143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by "checks for integer overflows, contributed by Google."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3143/">CVE-2008-3143</cve>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/444989">SUSE bug 444989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/609759">SUSE bug 609759</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3144</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3144" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3144" ref_url="https://www.suse.com/security/cve/CVE-2008-3144" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations.  NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3144/">CVE-2008-3144</cve>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3247</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3247" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3247" ref_url="https://www.suse.com/security/cve/CVE-2008-3247" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html" source="SUSE-SU"/>
    <description>
    The LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x86_64 platforms uses an incorrect size for ldt_desc, which allows local users to cause a denial of service (system crash) or possibly gain privileges via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3247/">CVE-2008-3247</cve>
	<bugzilla href="https://bugzilla.suse.com/408734">SUSE bug 408734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/432488">SUSE bug 432488</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3275</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3275" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3275" ref_url="https://www.suse.com/security/cve/CVE-2008-3275" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
    <description>
    The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2008-3275/">CVE-2008-3275</cve>
	<bugzilla href="https://bugzilla.suse.com/413936">SUSE bug 413936</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3496</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3496" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3496" ref_url="https://www.suse.com/security/cve/CVE-2008-3496" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux (V4L) implementation in the Linux kernel before 2.6.26.1 has unknown impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-3496/">CVE-2008-3496</cve>
	<bugzilla href="https://bugzilla.suse.com/415702">SUSE bug 415702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3522</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3522" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3522" ref_url="https://www.suse.com/security/cve/CVE-2008-3522" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-3522/">CVE-2008-3522</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/392410">SUSE bug 392410</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3526</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3526" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3526" ref_url="https://www.suse.com/security/cve/CVE-2008-3526" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 through 2.6.26.3 allows remote attackers to cause a denial of service (panic) or possibly have unspecified other impact via a crafted sca_keylength field associated with the SCTP_AUTH_KEY option.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3526/">CVE-2008-3526</cve>
	<bugzilla href="https://bugzilla.suse.com/421003">SUSE bug 421003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3527</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3527" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3527" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3527" ref_url="https://www.suse.com/security/cve/CVE-2008-3527" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3527/">CVE-2008-3527</cve>
	<bugzilla href="https://bugzilla.suse.com/437689">SUSE bug 437689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3528</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3528" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3528" ref_url="https://www.suse.com/security/cve/CVE-2008-3528" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:057" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service (temporary system hang) by mounting a filesystem that has corrupted dir-&gt;i_size and dir-&gt;i_blocks values and performing (a) read or (b) write operations. NOTE: there are limited scenarios in which this crosses privilege boundaries.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3528/">CVE-2008-3528</cve>
	<bugzilla href="https://bugzilla.suse.com/427244">SUSE bug 427244</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3534</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3534" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3534" ref_url="https://www.suse.com/security/cve/CVE-2008-3534" source="SUSE CVE"/>
    <description>
    The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause a denial of service (system crash) via a certain sequence of file create, remove, and overwrite operations, as demonstrated by the insserv program, related to allocation of "useless pages" and improper maintenance of the i_blocks count.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3534/">CVE-2008-3534</cve>
	<bugzilla href="https://bugzilla.suse.com/414257">SUSE bug 414257</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3792</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3792" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3792" ref_url="https://www.suse.com/security/cve/CVE-2008-3792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html" source="SUSE-SU"/>
    <description>
    net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4 does not verify that the SCTP-AUTH extension is enabled before proceeding with SCTP-AUTH API functions, which allows attackers to cause a denial of service (NULL pointer dereference and panic) via vectors that result in calls to (1) sctp_setsockopt_auth_chunk, (2) sctp_setsockopt_hmac_ident, (3) sctp_setsockopt_auth_key, (4) sctp_setsockopt_active_key, (5) sctp_setsockopt_del_key, (6) sctp_getsockopt_maxburst, (7) sctp_getsockopt_active_key, (8) sctp_getsockopt_peer_auth_chunks, or (9) sctp_getsockopt_local_auth_chunks.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3792/">CVE-2008-3792</cve>
	<bugzilla href="https://bugzilla.suse.com/423541">SUSE bug 423541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3825</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3825" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3825" ref_url="https://www.suse.com/security/cve/CVE-2008-3825" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html" source="SUSE-SU"/>
    <description>
    pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3825/">CVE-2008-3825</cve>
	<bugzilla href="https://bugzilla.suse.com/425861">SUSE bug 425861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480863" comment="pam_krb5-2.4.13-1.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480864" comment="pam_krb5-32bit-2.4.13-1.36 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3831</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3831" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3831" ref_url="https://www.suse.com/security/cve/CVE-2008-3831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00005.html" source="SUSE-SU"/>
    <description>
    The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/drm/i915_drv.c in OpenBSD does not restrict the DRM_I915_HWS_ADDR ioctl to the Direct Rendering Manager (DRM) master, which allows local users to cause a denial of service (memory corruption) via a crafted ioctl call, related to absence of the DRM_MASTER and DRM_ROOT_ONLY flags in the ioctl's configuration.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3831/">CVE-2008-3831</cve>
	<bugzilla href="https://bugzilla.suse.com/429919">SUSE bug 429919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3833</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3833" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3833" ref_url="https://www.suse.com/security/cve/CVE-2008-3833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3833/">CVE-2008-3833</cve>
	<bugzilla href="https://bugzilla.suse.com/432487">SUSE bug 432487</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3836</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3836" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3836" ref_url="https://www.suse.com/security/cve/CVE-2008-3836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html" source="SUSE-SU"/>
    <description>
    feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vectors related to feed preview and the (1) elem.doCommand, (2) elem.dispatchEvent, (3) _setTitleText, (4) _setTitleImage, and (5) _initSubscriptionUI functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3836/">CVE-2008-3836</cve>
	<bugzilla href="https://bugzilla.suse.com/429179">SUSE bug 429179</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3863</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3863" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3863" ref_url="https://www.suse.com/security/cve/CVE-2008-3863" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3863/">CVE-2008-3863</cve>
	<bugzilla href="https://bugzilla.suse.com/433756">SUSE bug 433756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/462353">SUSE bug 462353</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480223" comment="enscript-1.6.6-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083915" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3915</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3915" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3915" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3915" ref_url="https://www.suse.com/security/cve/CVE-2008-3915" source="SUSE CVE"/>
    <description>
    Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-3915/">CVE-2008-3915</cve>
	<bugzilla href="https://bugzilla.suse.com/423515">SUSE bug 423515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4063</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4063" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4063" ref_url="https://www.suse.com/security/cve/CVE-2008-4063" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and (1) a zero value of the "this" variable in the nsContentList::Item function; (2) interaction of the indic IME extension, a Hindi language selection, and the "g" character; and (3) interaction of the nsFrameList::SortByContentOrder function with a certain insufficient protection of inline frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-4063/">CVE-2008-4063</cve>
	<bugzilla href="https://bugzilla.suse.com/429179">SUSE bug 429179</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4064</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4064" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4064" ref_url="https://www.suse.com/security/cve/CVE-2008-4064" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to graphics rendering and (1) handling of a long alert messagebox in the cairo_surface_set_device_offset function, (2) integer overflows when handling animated PNG data in the info_callback function in nsPNGDecoder.cpp, and (3) an integer overflow when handling SVG data in the nsSVGFEGaussianBlurElement::SetupPredivide function in nsSVGFilters.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-19"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-4064/">CVE-2008-4064</cve>
	<bugzilla href="https://bugzilla.suse.com/429179">SUSE bug 429179</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4070</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4070" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4070" ref_url="https://www.suse.com/security/cve/CVE-2008-4070" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to "canceling [a] newsgroup message" and "cancelled newsgroup messages."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-4070/">CVE-2008-4070</cve>
	<bugzilla href="https://bugzilla.suse.com/429179">SUSE bug 429179</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4113</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4113" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4113" ref_url="https://www.suse.com/security/cve/CVE-2008-4113" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html" source="SUSE-SU"/>
    <description>
    The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4113/">CVE-2008-4113</cve>
	<bugzilla href="https://bugzilla.suse.com/429781">SUSE bug 429781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/432898">SUSE bug 432898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4210</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4210" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4210" ref_url="https://www.suse.com/security/cve/CVE-2008-4210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:057" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-22"/>
	<updated date="2023-05-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-4210/">CVE-2008-4210</cve>
	<bugzilla href="https://bugzilla.suse.com/429478">SUSE bug 429478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/432487">SUSE bug 432487</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4225</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4225" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4225" ref_url="https://www.suse.com/security/cve/CVE-2008-4225" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-4225/">CVE-2008-4225</cve>
	<bugzilla href="https://bugzilla.suse.com/445677">SUSE bug 445677</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4226</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4226" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4226" ref_url="https://www.suse.com/security/cve/CVE-2008-4226" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-4226/">CVE-2008-4226</cve>
	<bugzilla href="https://bugzilla.suse.com/441368">SUSE bug 441368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4302</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4302" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4302" ref_url="https://www.suse.com/security/cve/CVE-2008-4302" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4302/">CVE-2008-4302</cve>
	<bugzilla href="https://bugzilla.suse.com/427651">SUSE bug 427651</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084306" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4306</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4306" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4306" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4306" ref_url="https://www.suse.com/security/cve/CVE-2008-4306" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-4306/">CVE-2008-4306</cve>
	<bugzilla href="https://bugzilla.suse.com/433756">SUSE bug 433756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/462353">SUSE bug 462353</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480223" comment="enscript-1.6.6-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4307</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4307" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4307" ref_url="https://www.suse.com/security/cve/CVE-2008-4307" source="SUSE CVE"/>
    <description>
    Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2008-4307/">CVE-2008-4307</cve>
	<bugzilla href="https://bugzilla.suse.com/465672">SUSE bug 465672</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4316</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4316" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4316" ref_url="https://www.suse.com/security/cve/CVE-2008-4316" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00014.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-08-03"/>
	<cve href="https://www.suse.com/security/cve/CVE-2008-4316/">CVE-2008-4316</cve>
	<bugzilla href="https://bugzilla.suse.com/382708">SUSE bug 382708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/449927">SUSE bug 449927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/475541">SUSE bug 475541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481139" comment="glib2-devel-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481140" comment="glib2-lang-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481141" comment="glib2-tools-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481142" comment="libgio-2_0-0-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481143" comment="libgio-2_0-0-32bit-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481144" comment="libglib-2_0-0-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481145" comment="libglib-2_0-0-32bit-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481146" comment="libgmodule-2_0-0-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481147" comment="libgmodule-2_0-0-32bit-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481148" comment="libgobject-2_0-0-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481149" comment="libgobject-2_0-0-32bit-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481150" comment="libgthread-2_0-0-2.54.3-4.10.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4409</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4409" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4409" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4409" ref_url="https://www.suse.com/security/cve/CVE-2008-4409" source="SUSE CVE"/>
    <description>
    libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash), as demonstrated by use of xmllint on a certain XML document, a different vulnerability than CVE-2003-1564 and CVE-2008-3281.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-11"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4409/">CVE-2008-4409</cve>
	<bugzilla href="https://bugzilla.suse.com/432486">SUSE bug 432486</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337751" comment="libxml2-2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337753" comment="libxml2-2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337211" comment="libxml2-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337752" comment="libxml2-tools is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4445</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4445" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4445" ref_url="https://www.suse.com/security/cve/CVE-2008-4445" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html" source="SUSE-SU"/>
    <description>
    The sctp_auth_ep_set_hmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, does not verify that the identifier index is within the bounds established by SCTP_AUTH_HMAC_ID_MAX, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function, a different vulnerability than CVE-2008-4113.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4445/">CVE-2008-4445</cve>
	<bugzilla href="https://bugzilla.suse.com/432898">SUSE bug 432898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4554</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4554" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4554" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4554" ref_url="https://www.suse.com/security/cve/CVE-2008-4554" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
    <description>
    The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-11"/>
	<updated date="2023-07-11"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4554/">CVE-2008-4554</cve>
	<bugzilla href="https://bugzilla.suse.com/435151">SUSE bug 435151</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5029</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5029" ref_url="https://www.suse.com/security/cve/CVE-2008-5029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:057" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html" source="SUSE-SU"/>
    <description>
    The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-5029/">CVE-2008-5029</cve>
	<bugzilla href="https://bugzilla.suse.com/442364">SUSE bug 442364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/449739">SUSE bug 449739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5077</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5077" ref_url="https://www.suse.com/security/cve/CVE-2008-5077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html" source="SUSE-SU"/>
    <description>
    OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-5077/">CVE-2008-5077</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/465675">SUSE bug 465675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/465676">SUSE bug 465676</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/468866">SUSE bug 468866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/470968">SUSE bug 470968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/475108">SUSE bug 475108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/552497">SUSE bug 552497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/708266">SUSE bug 708266</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5079</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5079" ref_url="https://www.suse.com/security/cve/CVE-2008-5079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
    <description>
    net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-05"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2008-5079/">CVE-2008-5079</cve>
	<bugzilla href="https://bugzilla.suse.com/450417">SUSE bug 450417</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5519</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5519" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5519" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5519" ref_url="https://www.suse.com/security/cve/CVE-2008-5519" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2008-5519/">CVE-2008-5519</cve>
	<bugzilla href="https://bugzilla.suse.com/493575">SUSE bug 493575</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488310" comment="apache2-mod_jk-1.2.43-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5700</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5700" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5700" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5700" ref_url="https://www.suse.com/security/cve/CVE-2008-5700" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
    <description>
    libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-06"/>
	<updated date="2023-07-06"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2008-5700/">CVE-2008-5700</cve>
	<bugzilla href="https://bugzilla.suse.com/457896">SUSE bug 457896</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5702</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5702" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5702" ref_url="https://www.suse.com/security/cve/CVE-2008-5702" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
    <description>
    Buffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel before 2.6.28-rc1 might allow local users to have an unknown impact via a certain /dev/watchdog WDIOC_SETTIMEOUT IOCTL call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-12"/>
	<updated date="2023-07-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-5702/">CVE-2008-5702</cve>
	<bugzilla href="https://bugzilla.suse.com/457898">SUSE bug 457898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5984</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5984" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5984" ref_url="https://www.suse.com/security/cve/CVE-2008-5984" source="SUSE CVE"/>
    <description>
    Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-5984/">CVE-2008-5984</cve>
	<bugzilla href="https://bugzilla.suse.com/470096">SUSE bug 470096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488887" comment="dia-0.97.3-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488888" comment="dia-lang-0.97.3-2.32 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20087247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-7247</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-7247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7247" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-7247" ref_url="https://www.suse.com/security/cve/CVE-2008-7247" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00006.html" source="SUSE-SU"/>
    <description>
    sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-7247/">CVE-2008-7247</cve>
	<bugzilla href="https://bugzilla.suse.com/557669">SUSE bug 557669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/604528">SUSE bug 604528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0023</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0023" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0023" ref_url="https://www.suse.com/security/cve/CVE-2009-0023" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00005.html" source="SUSE-SU"/>
    <description>
    The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0023/">CVE-2009-0023</cve>
	<bugzilla href="https://bugzilla.suse.com/510301">SUSE bug 510301</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481001" comment="apr-util-devel-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481002" comment="libapr-util1-1.6.1-4.3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488345" comment="libapr-util1-dbd-mysql-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488346" comment="libapr-util1-dbd-pgsql-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488347" comment="libapr-util1-dbd-sqlite3-1.6.1-4.3.8 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0024</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0024" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0024" ref_url="https://www.suse.com/security/cve/CVE-2009-0024" source="SUSE CVE"/>
    <description>
    The sys_remap_file_pages function in mm/fremap.c in the Linux kernel before 2.6.24.1 allows local users to cause a denial of service or gain privileges via unspecified vectors, related to the vm_file structure member, and the mmap_region and do_munmap functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0024/">CVE-2009-0024</cve>
	<bugzilla href="https://bugzilla.suse.com/464050">SUSE bug 464050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0029</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0029" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0029" ref_url="https://www.suse.com/security/cve/CVE-2009-0029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
    <description>
    The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-bit argument in a 64-bit register was properly sign extended when sent from a user-mode application, but cannot verify this, which allows local users to cause a denial of service (crash) or possibly gain privileges via a crafted system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0029/">CVE-2009-0029</cve>
	<bugzilla href="https://bugzilla.suse.com/466015">SUSE bug 466015</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0035</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0035" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0035" ref_url="https://www.suse.com/security/cve/CVE-2009-0035" source="SUSE CVE"/>
    <description>
    alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2009-0035/">CVE-2009-0035</cve>
	<bugzilla href="https://bugzilla.suse.com/533396">SUSE bug 533396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480984" comment="alsa-1.1.5-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480985" comment="alsa-devel-1.1.5-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480986" comment="libasound2-1.1.5-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480987" comment="libasound2-32bit-1.1.5-6.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0037</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0037" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0037" ref_url="https://www.suse.com/security/cve/CVE-2009-0037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html" source="SUSE-SU"/>
    <description>
    The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0037/">CVE-2009-0037</cve>
	<bugzilla href="https://bugzilla.suse.com/475103">SUSE bug 475103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/527990">SUSE bug 527990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0040</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0040" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0040" ref_url="https://www.suse.com/security/cve/CVE-2009-0040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0040/">CVE-2009-0040</cve>
	<bugzilla href="https://bugzilla.suse.com/472745">SUSE bug 472745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/608040">SUSE bug 608040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0065</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0065" ref_url="https://www.suse.com/security/cve/CVE-2009-0065" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0065/">CVE-2009-0065</cve>
	<bugzilla href="https://bugzilla.suse.com/463522">SUSE bug 463522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0159</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0159" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0159" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0159" ref_url="https://www.suse.com/security/cve/CVE-2009-0159" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0159/">CVE-2009-0159</cve>
	<bugzilla href="https://bugzilla.suse.com/484653">SUSE bug 484653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/501632">SUSE bug 501632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0186</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0186" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0186" ref_url="https://www.suse.com/security/cve/CVE-2009-0186" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0186/">CVE-2009-0186</cve>
	<bugzilla href="https://bugzilla.suse.com/481769">SUSE bug 481769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481480" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0269</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0269" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0269" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0269" ref_url="https://www.suse.com/security/cve/CVE-2009-0269" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
    <description>
    fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0269/">CVE-2009-0269</cve>
	<bugzilla href="https://bugzilla.suse.com/470942">SUSE bug 470942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0316</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0316" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0316" ref_url="https://www.suse.com/security/cve/CVE-2009-0316" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:4619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013343.html" source="SUSE-SU"/>
    <description>
    Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0316/">CVE-2009-0316</cve>
	<bugzilla href="https://bugzilla.suse.com/470100">SUSE bug 470100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482738" comment="gvim-8.0.1568-3.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480954" comment="vim-8.0.1568-3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480955" comment="vim-data-8.0.1568-3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480956" comment="vim-data-common-8.0.1568-3.20 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090322" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0322</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0322" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0322" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0322" ref_url="https://www.suse.com/security/cve/CVE-2009-0322" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
    <description>
    drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service (system crash) via a read system call that specifies zero bytes from the (1) image_type or (2) packet_size file in /sys/devices/platform/dell_rbu/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0322/">CVE-2009-0322</cve>
	<bugzilla href="https://bugzilla.suse.com/470943">SUSE bug 470943</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0342</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0342" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0342" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0342" ref_url="https://www.suse.com/security/cve/CVE-2009-0342" source="SUSE CVE"/>
    <description>
    Niels Provos Systrace before 1.6f on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 64-bit syscall with a syscall number that corresponds to a policy-compliant 32-bit syscall.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0342/">CVE-2009-0342</cve>
	<bugzilla href="https://bugzilla.suse.com/483819">SUSE bug 483819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/483820">SUSE bug 483820</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0352</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0352" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0352" ref_url="https://www.suse.com/security/cve/CVE-2009-0352" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-06"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0352/">CVE-2009-0352</cve>
	<bugzilla href="https://bugzilla.suse.com/470074">SUSE bug 470074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0353</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0353" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0353" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0353" ref_url="https://www.suse.com/security/cve/CVE-2009-0353" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0353/">CVE-2009-0353</cve>
	<bugzilla href="https://bugzilla.suse.com/470074">SUSE bug 470074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0354</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0354" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0354" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0354" ref_url="https://www.suse.com/security/cve/CVE-2009-0354" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html" source="SUSE-SU"/>
    <description>
    Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same Origin Policy, and access the properties of an arbitrary window and conduct cross-site scripting (XSS) attacks, via vectors involving a chrome XBL method and the window.eval function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-0354/">CVE-2009-0354</cve>
	<bugzilla href="https://bugzilla.suse.com/470074">SUSE bug 470074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0355</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0355" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0355" ref_url="https://www.suse.com/security/cve/CVE-2009-0355" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html" source="SUSE-SU"/>
    <description>
    components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0355/">CVE-2009-0355</cve>
	<bugzilla href="https://bugzilla.suse.com/470074">SUSE bug 470074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0356</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0356" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0356" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0356" ref_url="https://www.suse.com/security/cve/CVE-2009-0356" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .desktop files, which allows user-assisted remote attackers to bypass the Same Origin Policy and execute arbitrary code with chrome privileges via vectors involving the URL field in a Desktop Entry section of a .desktop file, related to representation of about: URIs as jar:file:// URIs. NOTE: this issue exists because of an incomplete fix for CVE-2008-4582.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0356/">CVE-2009-0356</cve>
	<bugzilla href="https://bugzilla.suse.com/470074">SUSE bug 470074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090357" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0357</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0357" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0357" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0357" ref_url="https://www.suse.com/security/cve/CVE-2009-0357" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0357/">CVE-2009-0357</cve>
	<bugzilla href="https://bugzilla.suse.com/470074">SUSE bug 470074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0358</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0358" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0358" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0358" ref_url="https://www.suse.com/security/cve/CVE-2009-0358" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim's browser, as demonstrated by reading the response page of an https POST request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-07"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-0358/">CVE-2009-0358</cve>
	<bugzilla href="https://bugzilla.suse.com/470074">SUSE bug 470074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0590</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0590" ref_url="https://www.suse.com/security/cve/CVE-2009-0590" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html" source="SUSE-SU"/>
    <description>
    The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0590/">CVE-2009-0590</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/489641">SUSE bug 489641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0591</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0591" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0591" ref_url="https://www.suse.com/security/cve/CVE-2009-0591" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-0591/">CVE-2009-0591</cve>
	<bugzilla href="https://bugzilla.suse.com/489641">SUSE bug 489641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0676</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0676" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0676" ref_url="https://www.suse.com/security/cve/CVE-2009-0676" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
    <description>
    The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-0676/">CVE-2009-0676</cve>
	<bugzilla href="https://bugzilla.suse.com/478002">SUSE bug 478002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0688</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0688" ref_url="https://www.suse.com/security/cve/CVE-2009-0688" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0688/">CVE-2009-0688</cve>
	<bugzilla href="https://bugzilla.suse.com/499104">SUSE bug 499104</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488314" comment="cyrus-sasl-sqlauxprop-2.1.26-5.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481078" comment="cyrus-sasl-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481079" comment="cyrus-sasl-32bit-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481080" comment="cyrus-sasl-crammd5-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481081" comment="cyrus-sasl-crammd5-32bit-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481082" comment="cyrus-sasl-devel-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481083" comment="cyrus-sasl-digestmd5-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481084" comment="cyrus-sasl-digestmd5-32bit-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481085" comment="cyrus-sasl-gssapi-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481086" comment="cyrus-sasl-gssapi-32bit-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481087" comment="cyrus-sasl-otp-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481088" comment="cyrus-sasl-plain-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481089" comment="cyrus-sasl-plain-32bit-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481090" comment="cyrus-sasl-saslauthd-2.1.26-5.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481091" comment="libsasl2-3-2.1.26-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481092" comment="libsasl2-3-32bit-2.1.26-5.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0696</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0696" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0696" ref_url="https://www.suse.com/security/cve/CVE-2009-0696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00006.html" source="SUSE-SU"/>
    <description>
    The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0696/">CVE-2009-0696</cve>
	<bugzilla href="https://bugzilla.suse.com/526185">SUSE bug 526185</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335113" comment="bind-chrootenv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335115" comment="bind-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335114" comment="bind-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335112" comment="bind-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634659" comment="libbind9-1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634660" comment="libdns1605 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634661" comment="libirs-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634662" comment="libirs1601 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634663" comment="libisc1606 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634664" comment="libisccc1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634665" comment="libisccfg1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634666" comment="libns1604 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634667" comment="python3-bind is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0745</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0745" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0745" ref_url="https://www.suse.com/security/cve/CVE-2009-0745" source="SUSE CVE"/>
    <description>
    The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS) by arranging for crafted values to be present in available memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0745/">CVE-2009-0745</cve>
	<bugzilla href="https://bugzilla.suse.com/480860">SUSE bug 480860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0771</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0771" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0771" ref_url="https://www.suse.com/security/cve/CVE-2009-0771" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption and assertion failures.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0771/">CVE-2009-0771</cve>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0772</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0772" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0772" ref_url="https://www.suse.com/security/cve/CVE-2009-0772" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage collection, which triggers memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0772/">CVE-2009-0772</cve>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0773</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0773" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0773" ref_url="https://www.suse.com/security/cve/CVE-2009-0773" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains "some non-set elements," which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function, which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__, and watch, which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal, __defineSetter__, and watch, which triggers a hang.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0773/">CVE-2009-0773</cve>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0774</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0774" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0774" ref_url="https://www.suse.com/security/cve/CVE-2009-0774" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CVE-2009-0773.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0774/">CVE-2009-0774</cve>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0775</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0775" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0775" ref_url="https://www.suse.com/security/cve/CVE-2009-0775" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via "cloned XUL DOM elements which were linked as a parent and child," which are not properly handled during garbage collection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-07"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0775/">CVE-2009-0775</cve>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0776</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0776" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0776" ref_url="https://www.suse.com/security/cve/CVE-2009-0776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0776/">CVE-2009-0776</cve>
	<bugzilla href="https://bugzilla.suse.com/465291">SUSE bug 465291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0777</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0777" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0777" ref_url="https://www.suse.com/security/cve/CVE-2009-0777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0777/">CVE-2009-0777</cve>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0778</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0778" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0778" ref_url="https://www.suse.com/security/cve/CVE-2009-0778" source="SUSE CVE"/>
    <description>
    The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situations involving transmission of an ICMP Host Unreachable message, which allows remote attackers to cause a denial of service (connectivity outage) by sending a large series of packets to many destination IP addresses within this REJECT route, related to an "rt_cache leak."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0778/">CVE-2009-0778</cve>
	<bugzilla href="https://bugzilla.suse.com/482712">SUSE bug 482712</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0787</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0787" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0787" ref_url="https://www.suse.com/security/cve/CVE-2009-0787" source="SUSE CVE"/>
    <description>
    The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0787/">CVE-2009-0787</cve>
	<bugzilla href="https://bugzilla.suse.com/487107">SUSE bug 487107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0789</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0789" ref_url="https://www.suse.com/security/cve/CVE-2009-0789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0789/">CVE-2009-0789</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/489641">SUSE bug 489641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0790</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0790" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0790" ref_url="https://www.suse.com/security/cve/CVE-2009-0790" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html" source="SUSE-SU"/>
    <description>
    The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0790/">CVE-2009-0790</cve>
	<bugzilla href="https://bugzilla.suse.com/487762">SUSE bug 487762</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0799</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0799" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0799" ref_url="https://www.suse.com/security/cve/CVE-2009-0799" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0799/">CVE-2009-0799</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0800</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0800" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0800" ref_url="https://www.suse.com/security/cve/CVE-2009-0800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0800/">CVE-2009-0800</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0821</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0821" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0821" ref_url="https://www.suse.com/security/cve/CVE-2009-0821" source="SUSE CVE"/>
    <description>
    Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service (application crash) via nested calls to the window.print function, as demonstrated by a window.print(window.print()) in the onclick attribute of an INPUT element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0821/">CVE-2009-0821</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0834</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0834" ref_url="https://www.suse.com/security/cve/CVE-2009-0834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
    <description>
    The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0834/">CVE-2009-0834</cve>
	<bugzilla href="https://bugzilla.suse.com/483819">SUSE bug 483819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/483820">SUSE bug 483820</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0835</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0835" ref_url="https://www.suse.com/security/cve/CVE-2009-0835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
    <description>
    The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0835/">CVE-2009-0835</cve>
	<bugzilla href="https://bugzilla.suse.com/483819">SUSE bug 483819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/483820">SUSE bug 483820</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0935</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0935" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0935" ref_url="https://www.suse.com/security/cve/CVE-2009-0935" source="SUSE CVE"/>
    <description>
    The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-08"/>
	<updated date="2023-07-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0935/">CVE-2009-0935</cve>
	<bugzilla href="https://bugzilla.suse.com/482843">SUSE bug 482843</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0946</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0946" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0946" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0946" ref_url="https://www.suse.com/security/cve/CVE-2009-0946" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0946/">CVE-2009-0946</cve>
	<bugzilla href="https://bugzilla.suse.com/485889">SUSE bug 485889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/496289">SUSE bug 496289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/541626">SUSE bug 541626</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1044</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1044" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1044" ref_url="https://www.suse.com/security/cve/CVE-2009-1044" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1044/">CVE-2009-1044</cve>
	<bugzilla href="https://bugzilla.suse.com/465291">SUSE bug 465291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/488955">SUSE bug 488955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1046</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1046" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1046" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1046" ref_url="https://www.suse.com/security/cve/CVE-2009-1046" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
    <description>
    The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service (memory corruption) by selecting a small number of 3-byte UTF-8 characters, which triggers an "off-by-two memory error." NOTE: it is not clear whether this issue crosses privilege boundaries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1046/">CVE-2009-1046</cve>
	<bugzilla href="https://bugzilla.suse.com/478699">SUSE bug 478699</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1072</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1072" ref_url="https://www.suse.com/security/cve/CVE-2009-1072" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00004.html" source="SUSE-SU"/>
    <description>
    nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1072/">CVE-2009-1072</cve>
	<bugzilla href="https://bugzilla.suse.com/487681">SUSE bug 487681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/497551">SUSE bug 497551</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1179</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1179" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1179" ref_url="https://www.suse.com/security/cve/CVE-2009-1179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1179/">CVE-2009-1179</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1180</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1180" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1180" ref_url="https://www.suse.com/security/cve/CVE-2009-1180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1180/">CVE-2009-1180</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1181</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1181" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1181" ref_url="https://www.suse.com/security/cve/CVE-2009-1181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1181/">CVE-2009-1181</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1182</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1182" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1182" ref_url="https://www.suse.com/security/cve/CVE-2009-1182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1182/">CVE-2009-1182</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1183</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1183" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1183" ref_url="https://www.suse.com/security/cve/CVE-2009-1183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1183/">CVE-2009-1183</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1185</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1185" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1185" ref_url="https://www.suse.com/security/cve/CVE-2009-1185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html" source="SUSE-SU"/>
    <description>
    udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1185/">CVE-2009-1185</cve>
	<bugzilla href="https://bugzilla.suse.com/1034330">SUSE bug 1034330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/493158">SUSE bug 493158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550249">SUSE bug 550249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/776925">SUSE bug 776925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1187</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1187" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1187" ref_url="https://www.suse.com/security/cve/CVE-2009-1187" source="SUSE CVE"/>
    <description>
    Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1187/">CVE-2009-1187</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/508153">SUSE bug 508153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/508154">SUSE bug 508154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/539875">SUSE bug 539875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/566697">SUSE bug 566697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1188</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1188" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1188" ref_url="https://www.suse.com/security/cve/CVE-2009-1188" source="SUSE CVE"/>
    <description>
    Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1188/">CVE-2009-1188</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/508153">SUSE bug 508153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/508154">SUSE bug 508154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/539875">SUSE bug 539875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/546400">SUSE bug 546400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/566697">SUSE bug 566697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1191</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1191" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1191" ref_url="https://www.suse.com/security/cve/CVE-2009-1191" source="SUSE CVE"/>
    <description>
    mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1191/">CVE-2009-1191</cve>
	<bugzilla href="https://bugzilla.suse.com/521943">SUSE bug 521943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/539571">SUSE bug 539571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1192</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1192" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1192" ref_url="https://www.suse.com/security/cve/CVE-2009-1192" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:054" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:055" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1192/">CVE-2009-1192</cve>
	<bugzilla href="https://bugzilla.suse.com/497159">SUSE bug 497159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1195</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1195" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1195" ref_url="https://www.suse.com/security/cve/CVE-2009-1195" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1195/">CVE-2009-1195</cve>
	<bugzilla href="https://bugzilla.suse.com/512583">SUSE bug 512583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/513080">SUSE bug 513080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/539571">SUSE bug 539571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1242</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1242" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1242" ref_url="https://www.suse.com/security/cve/CVE-2009-1242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html" source="SUSE-SU"/>
    <description>
    The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka "Long mode enable") bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x86_64 platform.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-06"/>
	<updated date="2023-07-06"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1242/">CVE-2009-1242</cve>
	<bugzilla href="https://bugzilla.suse.com/492760">SUSE bug 492760</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1252</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1252" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1252" ref_url="https://www.suse.com/security/cve/CVE-2009-1252" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1252/">CVE-2009-1252</cve>
	<bugzilla href="https://bugzilla.suse.com/501632">SUSE bug 501632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1273</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1273" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1273" ref_url="https://www.suse.com/security/cve/CVE-2009-1273" source="SUSE CVE"/>
    <description>
    pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1273/">CVE-2009-1273</cve>
	<bugzilla href="https://bugzilla.suse.com/492764">SUSE bug 492764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/507729">SUSE bug 507729</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480865" comment="pam_ssh-2.1-2.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480866" comment="pam_ssh-32bit-2.1-2.27 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1302</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1302" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1302" ref_url="https://www.suse.com/security/cve/CVE-2009-1302" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1302/">CVE-2009-1302</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1303</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1303" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1303" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1303" ref_url="https://www.suse.com/security/cve/CVE-2009-1303" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1303/">CVE-2009-1303</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1304</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1304" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1304" ref_url="https://www.suse.com/security/cve/CVE-2009-1304" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1304/">CVE-2009-1304</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1305</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1305" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1305" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1305" ref_url="https://www.suse.com/security/cve/CVE-2009-1305" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1305/">CVE-2009-1305</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091306" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1306</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1306" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1306" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1306" ref_url="https://www.suse.com/security/cve/CVE-2009-1306" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a "Content-Disposition: attachment" designation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1306/">CVE-2009-1306</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1307</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1307" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1307" ref_url="https://www.suse.com/security/cve/CVE-2009-1307" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1307/">CVE-2009-1307</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/515951">SUSE bug 515951</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1308</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1308" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1308" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1308" ref_url="https://www.suse.com/security/cve/CVE-2009-1308" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1308/">CVE-2009-1308</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1309</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1309" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1309" ref_url="https://www.suse.com/security/cve/CVE-2009-1309" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1309/">CVE-2009-1309</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1310</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1310" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1310" ref_url="https://www.suse.com/security/cve/CVE-2009-1310" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1310/">CVE-2009-1310</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1311</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1311" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1311" ref_url="https://www.suse.com/security/cve/CVE-2009-1311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1311/">CVE-2009-1311</cve>
	<bugzilla href="https://bugzilla.suse.com/465291">SUSE bug 465291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/515951">SUSE bug 515951</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1312</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1312" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1312" ref_url="https://www.suse.com/security/cve/CVE-2009-1312" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1312/">CVE-2009-1312</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1313</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1313" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1313" ref_url="https://www.suse.com/security/cve/CVE-2009-1313" source="SUSE CVE"/>
    <description>
    The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1313/">CVE-2009-1313</cve>
	<bugzilla href="https://bugzilla.suse.com/500909">SUSE bug 500909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/502062">SUSE bug 502062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1336</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1336" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1336" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1336" ref_url="https://www.suse.com/security/cve/CVE-2009-1336" source="SUSE CVE"/>
    <description>
    fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a long filename, related to the encode_lookup function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1336/">CVE-2009-1336</cve>
	<bugzilla href="https://bugzilla.suse.com/492766">SUSE bug 492766</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1337</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1337" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1337" ref_url="https://www.suse.com/security/cve/CVE-2009-1337" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00004.html" source="SUSE-SU"/>
    <description>
    The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1337/">CVE-2009-1337</cve>
	<bugzilla href="https://bugzilla.suse.com/1171985">SUSE bug 1171985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/492768">SUSE bug 492768</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1377</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1377" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1377" ref_url="https://www.suse.com/security/cve/CVE-2009-1377" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1377/">CVE-2009-1377</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/504687">SUSE bug 504687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1378</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1378" ref_url="https://www.suse.com/security/cve/CVE-2009-1378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1378/">CVE-2009-1378</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/504687">SUSE bug 504687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1379</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1379" ref_url="https://www.suse.com/security/cve/CVE-2009-1379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1379/">CVE-2009-1379</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/504687">SUSE bug 504687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1384</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1384" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1384" ref_url="https://www.suse.com/security/cve/CVE-2009-1384" source="SUSE CVE"/>
    <description>
    pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1384/">CVE-2009-1384</cve>
	<bugzilla href="https://bugzilla.suse.com/507729">SUSE bug 507729</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480863" comment="pam_krb5-2.4.13-1.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480864" comment="pam_krb5-32bit-2.4.13-1.36 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1385</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1385" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1385" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1385" ref_url="https://www.suse.com/security/cve/CVE-2009-1385" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1385/">CVE-2009-1385</cve>
	<bugzilla href="https://bugzilla.suse.com/509822">SUSE bug 509822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/567376">SUSE bug 567376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/567678">SUSE bug 567678</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1386</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1386" ref_url="https://www.suse.com/security/cve/CVE-2009-1386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1386/">CVE-2009-1386</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/509031">SUSE bug 509031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/515659">SUSE bug 515659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1387</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1387" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1387" ref_url="https://www.suse.com/security/cve/CVE-2009-1387" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1387/">CVE-2009-1387</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/509031">SUSE bug 509031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/515659">SUSE bug 515659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1389</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1389" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1389" ref_url="https://www.suse.com/security/cve/CVE-2009-1389" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1389/">CVE-2009-1389</cve>
	<bugzilla href="https://bugzilla.suse.com/511243">SUSE bug 511243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/567376">SUSE bug 567376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/567678">SUSE bug 567678</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1439</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1439" ref_url="https://www.suse.com/security/cve/CVE-2009-1439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-17"/>
	<updated date="2023-05-17"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1439/">CVE-2009-1439</cve>
	<bugzilla href="https://bugzilla.suse.com/492282">SUSE bug 492282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/498824">SUSE bug 498824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1494</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1494" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1494" ref_url="https://www.suse.com/security/cve/CVE-2009-1494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00005.html" source="SUSE-SU"/>
    <description>
    The process_stat function in Memcached 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1494/">CVE-2009-1494</cve>
	<bugzilla href="https://bugzilla.suse.com/501656">SUSE bug 501656</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334021" comment="memcached is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335437" comment="memcached-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488250" comment="memcached-1.5.6-2.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488251" comment="memcached-devel-1.5.6-2.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1563</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1563" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1563" ref_url="https://www.suse.com/security/cve/CVE-2009-1563" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-0689.  Reason: This candidate is a duplicate of CVE-2009-0689.  Certain codebase relationships were not originally clear.  Notes: All CVE users should reference CVE-2009-0689 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1563/">CVE-2009-1563</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/546371">SUSE bug 546371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557126">SUSE bug 557126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557127">SUSE bug 557127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557128">SUSE bug 557128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557671">SUSE bug 557671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1571</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1571" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1571" ref_url="https://www.suse.com/security/cve/CVE-2009-1571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1571/">CVE-2009-1571</cve>
	<bugzilla href="https://bugzilla.suse.com/576969">SUSE bug 576969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581160">SUSE bug 581160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/584499">SUSE bug 584499</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1630</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1630" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1630" ref_url="https://www.suse.com/security/cve/CVE-2009-1630" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
    <description>
    The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1630/">CVE-2009-1630</cve>
	<bugzilla href="https://bugzilla.suse.com/1175689">SUSE bug 1175689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/503353">SUSE bug 503353</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1633</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1633" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1633" ref_url="https://www.suse.com/security/cve/CVE-2009-1633" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:054" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters, related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-19"/>
	<updated date="2023-05-19"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1633/">CVE-2009-1633</cve>
	<bugzilla href="https://bugzilla.suse.com/492282">SUSE bug 492282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1720</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1720" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1720" ref_url="https://www.suse.com/security/cve/CVE-2009-1720" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to (1) the Imf::PreviewImage::PreviewImage function and (2) compressor constructors.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1720/">CVE-2009-1720</cve>
	<bugzilla href="https://bugzilla.suse.com/527538">SUSE bug 527538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/527539">SUSE bug 527539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486645" comment="libIlmImf-2_2-23-2.2.1-3.3.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486646" comment="libIlmImfUtil-2_2-23-2.2.1-3.3.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486647" comment="openexr-devel-2.2.1-3.3.11 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1721</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1721" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1721" ref_url="https://www.suse.com/security/cve/CVE-2009-1721" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html" source="SUSE-SU"/>
    <description>
    The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1721/">CVE-2009-1721</cve>
	<bugzilla href="https://bugzilla.suse.com/527538">SUSE bug 527538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/527539">SUSE bug 527539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486645" comment="libIlmImf-2_2-23-2.2.1-3.3.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486646" comment="libIlmImfUtil-2_2-23-2.2.1-3.3.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486647" comment="openexr-devel-2.2.1-3.3.11 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091883" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1883</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1883" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1883" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1883" ref_url="https://www.suse.com/security/cve/CVE-2009-1883" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
    <description>
    The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1883/">CVE-2009-1883</cve>
	<bugzilla href="https://bugzilla.suse.com/539879">SUSE bug 539879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1885</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1885" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1885" ref_url="https://www.suse.com/security/cve/CVE-2009-1885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service (application crash) via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrated by the Codenomicon XML fuzzing framework.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1885/">CVE-2009-1885</cve>
	<bugzilla href="https://bugzilla.suse.com/530708">SUSE bug 530708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481575" comment="libxerces-c-3_1-3.1.4-3.3.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481576" comment="libxerces-c-devel-3.1.4-3.3.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091890" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1890</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1890" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1890" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1890" ref_url="https://www.suse.com/security/cve/CVE-2009-1890" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1890/">CVE-2009-1890</cve>
	<bugzilla href="https://bugzilla.suse.com/519194">SUSE bug 519194</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091891" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1891</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1891" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1891" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1891" ref_url="https://www.suse.com/security/cve/CVE-2009-1891" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1891/">CVE-2009-1891</cve>
	<bugzilla href="https://bugzilla.suse.com/521906">SUSE bug 521906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091892" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1892</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1892" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1892" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1892" ref_url="https://www.suse.com/security/cve/CVE-2009-1892" source="SUSE CVE"/>
    <description>
    dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet configuration settings are both used, allows remote attackers to cause a denial of service (daemon crash) via unspecified requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1892/">CVE-2009-1892</cve>
	<bugzilla href="https://bugzilla.suse.com/519413">SUSE bug 519413</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1895</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1895" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1895" ref_url="https://www.suse.com/security/cve/CVE-2009-1895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
    <description>
    The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmap_min_addr protection mechanism, or (3) defeat address space layout randomization (ASLR).
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1895/">CVE-2009-1895</cve>
	<bugzilla href="https://bugzilla.suse.com/521427">SUSE bug 521427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1955</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1955" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1955" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1955" ref_url="https://www.suse.com/security/cve/CVE-2009-1955" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
    <description>
    The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1955/">CVE-2009-1955</cve>
	<bugzilla href="https://bugzilla.suse.com/509825">SUSE bug 509825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/510301">SUSE bug 510301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/529591">SUSE bug 529591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992541">SUSE bug 992541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1956</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1956" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1956" ref_url="https://www.suse.com/security/cve/CVE-2009-1956" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00005.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1956/">CVE-2009-1956</cve>
	<bugzilla href="https://bugzilla.suse.com/510301">SUSE bug 510301</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1961</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1961" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1961" ref_url="https://www.suse.com/security/cve/CVE-2009-1961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html" source="SUSE-SU"/>
    <description>
    The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-1961/">CVE-2009-1961</cve>
	<bugzilla href="https://bugzilla.suse.com/495065">SUSE bug 495065</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2285</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2285" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2285" ref_url="https://www.suse.com/security/cve/CVE-2009-2285" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2285/">CVE-2009-2285</cve>
	<bugzilla href="https://bugzilla.suse.com/518698">SUSE bug 518698</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2347</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2347" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2347" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2347" ref_url="https://www.suse.com/security/cve/CVE-2009-2347" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2347/">CVE-2009-2347</cve>
	<bugzilla href="https://bugzilla.suse.com/519796">SUSE bug 519796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/616827">SUSE bug 616827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2406</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2406" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2406" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2406" ref_url="https://www.suse.com/security/cve/CVE-2009-2406" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-11"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2406/">CVE-2009-2406</cve>
	<bugzilla href="https://bugzilla.suse.com/523719">SUSE bug 523719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2407</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2407" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2407" ref_url="https://www.suse.com/security/cve/CVE-2009-2407" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a large encrypted key size in a Tag 3 packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-10"/>
	<updated date="2023-02-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2407/">CVE-2009-2407</cve>
	<bugzilla href="https://bugzilla.suse.com/523719">SUSE bug 523719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2411</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2411" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2411" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2411" ref_url="https://www.suse.com/security/cve/CVE-2009-2411" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00006.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2411/">CVE-2009-2411</cve>
	<bugzilla href="https://bugzilla.suse.com/528714">SUSE bug 528714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802057">SUSE bug 802057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2412</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2412" ref_url="https://www.suse.com/security/cve/CVE-2009-2412" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2412/">CVE-2009-2412</cve>
	<bugzilla href="https://bugzilla.suse.com/528714">SUSE bug 528714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/529591">SUSE bug 529591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802057">SUSE bug 802057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480063" comment="apr-devel-1.6.3-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481001" comment="apr-util-devel-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481002" comment="libapr-util1-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480064" comment="libapr1-1.6.3-1.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488345" comment="libapr-util1-dbd-mysql-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488346" comment="libapr-util1-dbd-pgsql-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488347" comment="libapr-util1-dbd-sqlite3-1.6.1-4.3.8 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2417</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2417" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2417" ref_url="https://www.suse.com/security/cve/CVE-2009-2417" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html" source="SUSE-SU"/>
    <description>
    lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2417/">CVE-2009-2417</cve>
	<bugzilla href="https://bugzilla.suse.com/527990">SUSE bug 527990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/528372">SUSE bug 528372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2470</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2470" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2470" ref_url="https://www.suse.com/security/cve/CVE-2009-2470" source="SUSE CVE"/>
    <description>
    Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2470/">CVE-2009-2470</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2473</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2473" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2473" ref_url="https://www.suse.com/security/cve/CVE-2009-2473" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html" source="SUSE-SU"/>
    <description>
    neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2473/">CVE-2009-2473</cve>
	<bugzilla href="https://bugzilla.suse.com/528370">SUSE bug 528370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/532345">SUSE bug 532345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480624" comment="libneon-devel-0.30.2-2.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480625" comment="libneon27-0.30.2-2.15 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2474</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2474" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2474" ref_url="https://www.suse.com/security/cve/CVE-2009-2474" source="SUSE CVE"/>
    <description>
    neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2474/">CVE-2009-2474</cve>
	<bugzilla href="https://bugzilla.suse.com/528370">SUSE bug 528370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480624" comment="libneon-devel-0.30.2-2.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480625" comment="libneon27-0.30.2-2.15 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2624</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2624" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2624" ref_url="https://www.suse.com/security/cve/CVE-2009-2624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html" source="SUSE-SU"/>
    <description>
    The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attackers to cause a denial of service (application crash or infinite loop) or possibly execute arbitrary code via a crafted archive.  NOTE: this issue is caused by a CVE-2006-4334 regression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2624/">CVE-2009-2624</cve>
	<bugzilla href="https://bugzilla.suse.com/570331">SUSE bug 570331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/588113">SUSE bug 588113</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480324" comment="gzip-1.9-2.21 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2625</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2625" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2625" ref_url="https://www.suse.com/security/cve/CVE-2009-2625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00014.html" source="SUSE-SU"/>
    <description>
    XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2625/">CVE-2009-2625</cve>
	<bugzilla href="https://bugzilla.suse.com/525562">SUSE bug 525562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/530717">SUSE bug 530717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/534025">SUSE bug 534025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/534721">SUSE bug 534721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/537969">SUSE bug 537969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/540945">SUSE bug 540945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/548655">SUSE bug 548655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550664">SUSE bug 550664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/553220">SUSE bug 553220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/558892">SUSE bug 558892</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581162">SUSE bug 581162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581765">SUSE bug 581765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/610080">SUSE bug 610080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/611931">SUSE bug 611931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/611932">SUSE bug 611932</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2654</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2654" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2654" ref_url="https://www.suse.com/security/cve/CVE-2009-2654" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls the stop method during the loading of the error page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2654/">CVE-2009-2654</cve>
	<bugzilla href="https://bugzilla.suse.com/527489">SUSE bug 527489</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2666</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2666" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2666" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2666" ref_url="https://www.suse.com/security/cve/CVE-2009-2666" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00006.html" source="SUSE-SU"/>
    <description>
    socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2666/">CVE-2009-2666</cve>
	<bugzilla href="https://bugzilla.suse.com/528746">SUSE bug 528746</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480228" comment="fetchmail-6.3.26-3.27 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482674" comment="fetchmailconf-6.3.26-3.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2691</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2691" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2691" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2691" ref_url="https://www.suse.com/security/cve/CVE-2009-2691" source="SUSE CVE"/>
    <description>
    The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-17"/>
	<updated date="2023-05-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2691/">CVE-2009-2691</cve>
	<bugzilla href="https://bugzilla.suse.com/529919">SUSE bug 529919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2694</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2694" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2694" ref_url="https://www.suse.com/security/cve/CVE-2009-2694" source="SUSE CVE"/>
    <description>
    The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-06"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2694/">CVE-2009-2694</cve>
	<bugzilla href="https://bugzilla.suse.com/527100">SUSE bug 527100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2698</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2698" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2698" ref_url="https://www.suse.com/security/cve/CVE-2009-2698" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html" source="SUSE-SU"/>
    <description>
    The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-23"/>
	<updated date="2023-05-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2698/">CVE-2009-2698</cve>
	<bugzilla href="https://bugzilla.suse.com/532338">SUSE bug 532338</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2699</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2699" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2699" ref_url="https://www.suse.com/security/cve/CVE-2009-2699" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003365.html" source="SUSE-SU"/>
    <description>
    The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2699/">CVE-2009-2699</cve>
	<bugzilla href="https://bugzilla.suse.com/1078450">SUSE bug 1078450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2703</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2703" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2703" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2703" ref_url="https://www.suse.com/security/cve/CVE-2009-2703" source="SUSE CVE"/>
    <description>
    libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2703/">CVE-2009-2703</cve>
	<bugzilla href="https://bugzilla.suse.com/537214">SUSE bug 537214</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2767</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2767" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2767" ref_url="https://www.suse.com/security/cve/CVE-2009-2767" source="SUSE CVE"/>
    <description>
    The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2767/">CVE-2009-2767</cve>
	<bugzilla href="https://bugzilla.suse.com/529555">SUSE bug 529555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2848</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2848" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2848" ref_url="https://www.suse.com/security/cve/CVE-2009-2848" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:054" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-&gt;clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2848/">CVE-2009-2848</cve>
	<bugzilla href="https://bugzilla.suse.com/527865">SUSE bug 527865</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2903</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2903" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2903" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2903" ref_url="https://www.suse.com/security/cve/CVE-2009-2903" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
    <description>
    Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service (memory consumption) via IP-DDP datagrams.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2903/">CVE-2009-2903</cve>
	<bugzilla href="https://bugzilla.suse.com/539878">SUSE bug 539878</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2905</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2905" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2905" ref_url="https://www.suse.com/security/cve/CVE-2009-2905" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2905/">CVE-2009-2905</cve>
	<bugzilla href="https://bugzilla.suse.com/540930">SUSE bug 540930</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486518" comment="newt-devel-0.52.20-5.35 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480626" comment="libnewt0_52-0.52.20-5.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480627" comment="newt-0.52.20-5.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480628" comment="python3-newt-0.52.20-5.35 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2908</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2908" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2908" ref_url="https://www.suse.com/security/cve/CVE-2009-2908" source="SUSE CVE"/>
    <description>
    The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2908/">CVE-2009-2908</cve>
	<bugzilla href="https://bugzilla.suse.com/545274">SUSE bug 545274</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2910</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2910" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2910" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2910" ref_url="https://www.suse.com/security/cve/CVE-2009-2910" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:054" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:055" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-2910/">CVE-2009-2910</cve>
	<bugzilla href="https://bugzilla.suse.com/1175785">SUSE bug 1175785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/543740">SUSE bug 543740</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2911</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2911" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2911" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2911" ref_url="https://www.suse.com/security/cve/CVE-2009-2911" source="SUSE CVE"/>
    <description>
    SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-2911/">CVE-2009-2911</cve>
	<bugzilla href="https://bugzilla.suse.com/548361">SUSE bug 548361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/574243">SUSE bug 574243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487788" comment="systemtap-3.2-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487789" comment="systemtap-runtime-3.2-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487790" comment="systemtap-sdt-devel-3.2-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487791" comment="systemtap-server-3.2-7.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3026</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3026" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3026" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3026" ref_url="https://www.suse.com/security/cve/CVE-2009-3026" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3026/">CVE-2009-3026</cve>
	<bugzilla href="https://bugzilla.suse.com/535570">SUSE bug 535570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550170">SUSE bug 550170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3069</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3069" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3069" ref_url="https://www.suse.com/security/cve/CVE-2009-3069" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3069/">CVE-2009-3069</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3070</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3070" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3070" ref_url="https://www.suse.com/security/cve/CVE-2009-3070" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3070/">CVE-2009-3070</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3071</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3071" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3071" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3071" ref_url="https://www.suse.com/security/cve/CVE-2009-3071" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3071/">CVE-2009-3071</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3072</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3072" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3072" ref_url="https://www.suse.com/security/cve/CVE-2009-3072" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3072/">CVE-2009-3072</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590499">SUSE bug 590499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607935">SUSE bug 607935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3073</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3073" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3073" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3073" ref_url="https://www.suse.com/security/cve/CVE-2009-3073" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3073/">CVE-2009-3073</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3074</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3074" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3074" ref_url="https://www.suse.com/security/cve/CVE-2009-3074" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3074/">CVE-2009-3074</cve>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3075</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3075" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3075" ref_url="https://www.suse.com/security/cve/CVE-2009-3075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3075/">CVE-2009-3075</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590499">SUSE bug 590499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607935">SUSE bug 607935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3077</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3077" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3077" ref_url="https://www.suse.com/security/cve/CVE-2009-3077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3077/">CVE-2009-3077</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590499">SUSE bug 590499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607935">SUSE bug 607935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3078</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3078" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3078" ref_url="https://www.suse.com/security/cve/CVE-2009-3078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to trigger a vertical scroll and spoof URLs via unspecified Unicode characters with a tall line-height property.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3078/">CVE-2009-3078</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3079</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3079" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3079" ref_url="https://www.suse.com/security/cve/CVE-2009-3079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3079/">CVE-2009-3079</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3083</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3083" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3083" ref_url="https://www.suse.com/security/cve/CVE-2009-3083" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3083/">CVE-2009-3083</cve>
	<bugzilla href="https://bugzilla.suse.com/536602">SUSE bug 536602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550170">SUSE bug 550170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3084</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3084" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3084" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3084" ref_url="https://www.suse.com/security/cve/CVE-2009-3084" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect "UTF16-LE" charset name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3084/">CVE-2009-3084</cve>
	<bugzilla href="https://bugzilla.suse.com/536602">SUSE bug 536602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550170">SUSE bug 550170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3085</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3085" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3085" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3085" ref_url="https://www.suse.com/security/cve/CVE-2009-3085" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3085/">CVE-2009-3085</cve>
	<bugzilla href="https://bugzilla.suse.com/536602">SUSE bug 536602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550170">SUSE bug 550170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3094</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3094" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3094" ref_url="https://www.suse.com/security/cve/CVE-2009-3094" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3094/">CVE-2009-3094</cve>
	<bugzilla href="https://bugzilla.suse.com/538322">SUSE bug 538322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3095</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3095" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3095" ref_url="https://www.suse.com/security/cve/CVE-2009-3095" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3095/">CVE-2009-3095</cve>
	<bugzilla href="https://bugzilla.suse.com/538322">SUSE bug 538322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3228</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3228" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3228" ref_url="https://www.suse.com/security/cve/CVE-2009-3228" source="SUSE CVE"/>
    <description>
    The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-3228/">CVE-2009-3228</cve>
	<bugzilla href="https://bugzilla.suse.com/1175788">SUSE bug 1175788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/536467">SUSE bug 536467</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3274</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3274" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3274" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3274" ref_url="https://www.suse.com/security/cve/CVE-2009-3274" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3274/">CVE-2009-3274</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3286</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3286" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3286" ref_url="https://www.suse.com/security/cve/CVE-2009-3286" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3286/">CVE-2009-3286</cve>
	<bugzilla href="https://bugzilla.suse.com/541648">SUSE bug 541648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3297</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3297" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3297" ref_url="https://www.suse.com/security/cve/CVE-2009-3297" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-0787, CVE-2010-0788, CVE-2010-0789.  Reason: this candidate was intended for one issue in Samba, but it was used for multiple distinct issues, including one in FUSE and one in ncpfs.  Notes: All CVE users should consult CVE-2010-0787 (Samba), CVE-2010-0788 (ncpfs), and CVE-2010-0789 (FUSE) to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-3297/">CVE-2009-3297</cve>
	<bugzilla href="https://bugzilla.suse.com/550002">SUSE bug 550002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550003">SUSE bug 550003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550004">SUSE bug 550004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/577925">SUSE bug 577925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/583535">SUSE bug 583535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/583536">SUSE bug 583536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/594263">SUSE bug 594263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/620680">SUSE bug 620680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/651598">SUSE bug 651598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481128" comment="fuse-2.9.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481129" comment="fuse-devel-2.9.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481130" comment="fuse-doc-2.9.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481131" comment="libfuse2-2.9.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481132" comment="libulockmgr1-2.9.7-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3370</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3370" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3370" ref_url="https://www.suse.com/security/cve/CVE-2009-3370" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3370/">CVE-2009-3370</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3371</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3371" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3371" ref_url="https://www.suse.com/security/cve/CVE-2009-3371" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by creating JavaScript web-workers recursively.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3371/">CVE-2009-3371</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3372</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3372" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3372" ref_url="https://www.suse.com/security/cve/CVE-2009-3372" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3372/">CVE-2009-3372</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3373</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3373" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3373" ref_url="https://www.suse.com/security/cve/CVE-2009-3373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3373/">CVE-2009-3373</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557686">SUSE bug 557686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3374</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3374" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3374" ref_url="https://www.suse.com/security/cve/CVE-2009-3374" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to "doubly-wrapped objects."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3374/">CVE-2009-3374</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3375</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3375" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3375" ref_url="https://www.suse.com/security/cve/CVE-2009-3375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3375/">CVE-2009-3375</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3376</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3376" ref_url="https://www.suse.com/security/cve/CVE-2009-3376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3376/">CVE-2009-3376</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590499">SUSE bug 590499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607935">SUSE bug 607935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3377</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3377" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3377" ref_url="https://www.suse.com/security/cve/CVE-2009-3377" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3377/">CVE-2009-3377</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3378</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3378" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3378" ref_url="https://www.suse.com/security/cve/CVE-2009-3378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The oggplay_data_handle_theora_frame function in media/liboggplay/src/liboggplay/oggplay_data.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a crafted .ogg video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3378/">CVE-2009-3378</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3379</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3379" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3379" ref_url="https://www.suse.com/security/cve/CVE-2009-3379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.  NOTE: this might overlap CVE-2009-2663.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3379/">CVE-2009-3379</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/608192">SUSE bug 608192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481532" comment="libvorbis-devel-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3381</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3381" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3381" ref_url="https://www.suse.com/security/cve/CVE-2009-3381" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3381/">CVE-2009-3381</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3383</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3383" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3383" ref_url="https://www.suse.com/security/cve/CVE-2009-3383" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-17"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3383/">CVE-2009-3383</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3388</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3388" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3388" ref_url="https://www.suse.com/security/cve/CVE-2009-3388" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
    <description>
    liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to "memory safety issues."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3388/">CVE-2009-3388</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3389</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3389" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3389" ref_url="https://www.suse.com/security/cve/CVE-2009-3389" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3389/">CVE-2009-3389</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581722">SUSE bug 581722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3490</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3490" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3490" ref_url="https://www.suse.com/security/cve/CVE-2009-3490" source="SUSE CVE"/>
    <description>
    GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2009-3490/">CVE-2009-3490</cve>
	<bugzilla href="https://bugzilla.suse.com/528298">SUSE bug 528298</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334123" comment="wget is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3547</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3547" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3547" ref_url="https://www.suse.com/security/cve/CVE-2009-3547" source="SUSE CVE"/>
		<reference ref_id="" ref_url="" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:054" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:055" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-10"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2009-3547/">CVE-2009-3547</cve>
	<bugzilla href="https://bugzilla.suse.com/550001">SUSE bug 550001</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3555</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3555" ref_url="https://www.suse.com/security/cve/CVE-2009-3555" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:057" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="TID7005397" ref_url="https://www.suse.com/support/kb/doc/?id=7005397" source="SUSE-SU"/>
		<reference ref_id="TID7005950" ref_url="https://www.suse.com/support/kb/doc/?id=7005950" source="SUSE-SU"/>
		<reference ref_id="TID7008600" ref_url="https://www.suse.com/support/kb/doc/?id=7008600" source="SUSE-SU"/>
		<reference ref_id="TID7008930" ref_url="https://www.suse.com/support/kb/doc/?id=7008930" source="SUSE-SU"/>
		<reference ref_id="TID7009561" ref_url="https://www.suse.com/support/kb/doc/?id=7009561" source="SUSE-SU"/>
		<reference ref_id="TID7010166" ref_url="https://www.suse.com/support/kb/doc/?id=7010166" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0100-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0182-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1025-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1025-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3555/">CVE-2009-3555</cve>
	<bugzilla href="https://bugzilla.suse.com/1077582">SUSE bug 1077582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/552497">SUSE bug 552497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/553641">SUSE bug 553641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/554069">SUSE bug 554069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/554084">SUSE bug 554084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/554085">SUSE bug 554085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/555177">SUSE bug 555177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557168">SUSE bug 557168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/564507">SUSE bug 564507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/566041">SUSE bug 566041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/584292">SUSE bug 584292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/588996">SUSE bug 588996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590826">SUSE bug 590826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/592589">SUSE bug 592589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/594415">SUSE bug 594415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/604782">SUSE bug 604782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/614753">SUSE bug 614753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/622073">SUSE bug 622073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/623905">SUSE bug 623905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/642531">SUSE bug 642531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648140">SUSE bug 648140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/670152">SUSE bug 670152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/704832">SUSE bug 704832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/728876">SUSE bug 728876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/729181">SUSE bug 729181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/753357">SUSE bug 753357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791794">SUSE bug 791794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/799454">SUSE bug 799454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/815621">SUSE bug 815621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905347">SUSE bug 905347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979060">SUSE bug 979060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3556</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3556" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3556" ref_url="https://www.suse.com/security/cve/CVE-2009-3556" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html" source="SUSE-SU"/>
    <description>
    A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-3556/">CVE-2009-3556</cve>
	<bugzilla href="https://bugzilla.suse.com/572193">SUSE bug 572193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/605463">SUSE bug 605463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3559</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3559" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3559" ref_url="https://www.suse.com/security/cve/CVE-2009-3559" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that attempts to perform a require_once on a file in a standard library directory. NOTE: a reliable third party reports that this is not a vulnerability, because it results in a more restrictive security policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-20"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3559/">CVE-2009-3559</cve>
	<bugzilla href="https://bugzilla.suse.com/557157">SUSE bug 557157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334367" comment="java-11-openjdk is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334367" comment="java-11-openjdk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337974" comment="java-11-openjdk-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337975" comment="java-11-openjdk-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337976" comment="java-11-openjdk-headless is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3560</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3560" ref_url="https://www.suse.com/security/cve/CVE-2009-3560" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00014.html" source="SUSE-SU"/>
    <description>
    The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3560/">CVE-2009-3560</cve>
	<bugzilla href="https://bugzilla.suse.com/550666">SUSE bug 550666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/558892">SUSE bug 558892</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/561561">SUSE bug 561561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581162">SUSE bug 581162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581765">SUSE bug 581765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/611931">SUSE bug 611931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/694595">SUSE bug 694595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725950">SUSE bug 725950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481001" comment="apr-util-devel-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481002" comment="libapr-util1-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488345" comment="libapr-util1-dbd-mysql-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488346" comment="libapr-util1-dbd-pgsql-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488347" comment="libapr-util1-dbd-sqlite3-1.6.1-4.3.8 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3607</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3607" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3607" ref_url="https://www.suse.com/security/cve/CVE-2009-3607" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3607/">CVE-2009-3607</cve>
	<bugzilla href="https://bugzilla.suse.com/546393">SUSE bug 546393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/566697">SUSE bug 566697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3608</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3608" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3608" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3608" ref_url="https://www.suse.com/security/cve/CVE-2009-3608" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3608/">CVE-2009-3608</cve>
	<bugzilla href="https://bugzilla.suse.com/543090">SUSE bug 543090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/543410">SUSE bug 543410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/546400">SUSE bug 546400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/546404">SUSE bug 546404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/556049">SUSE bug 556049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/566697">SUSE bug 566697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093612" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3612</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3612" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3612" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3612" ref_url="https://www.suse.com/security/cve/CVE-2009-3612" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2005-4881.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-3612/">CVE-2009-3612</cve>
	<bugzilla href="https://bugzilla.suse.com/536467">SUSE bug 536467</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3615</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3615" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3615" ref_url="https://www.suse.com/security/cve/CVE-2009-3615" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3615/">CVE-2009-3615</cve>
	<bugzilla href="https://bugzilla.suse.com/548072">SUSE bug 548072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550170">SUSE bug 550170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3620</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3620" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3620" ref_url="https://www.suse.com/security/cve/CVE-2009-3620" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
    <description>
    The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-10"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3620/">CVE-2009-3620</cve>
	<bugzilla href="https://bugzilla.suse.com/548071">SUSE bug 548071</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3621</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3621" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3621" ref_url="https://www.suse.com/security/cve/CVE-2009-3621" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
    <description>
    net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2009-3621/">CVE-2009-3621</cve>
	<bugzilla href="https://bugzilla.suse.com/548070">SUSE bug 548070</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3623</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3623" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3623" ref_url="https://www.suse.com/security/cve/CVE-2009-3623" source="SUSE CVE"/>
    <description>
    The lookup_cb_cred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTH_NULL authentication flavor, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an NFSv4 mount request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3623/">CVE-2009-3623</cve>
	<bugzilla href="https://bugzilla.suse.com/549029">SUSE bug 549029</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3624</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3624" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3624" ref_url="https://www.suse.com/security/cve/CVE-2009-3624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
    <description>
    The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the reference count of a keyring, which allows local users to gain privileges or cause a denial of service (OOPS) via vectors involving calls to this function without specifying a keyring by ID, as demonstrated by a series of keyctl request2 and keyctl list commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3624/">CVE-2009-3624</cve>
	<bugzilla href="https://bugzilla.suse.com/549030">SUSE bug 549030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3627</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3627" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3627" ref_url="https://www.suse.com/security/cve/CVE-2009-3627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3627/">CVE-2009-3627</cve>
	<bugzilla href="https://bugzilla.suse.com/550076">SUSE bug 550076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/585716">SUSE bug 585716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480873" comment="perl-HTML-Parser-3.72-1.26 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3638</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3638" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3638" ref_url="https://www.suse.com/security/cve/CVE-2009-3638" source="SUSE CVE"/>
    <description>
    Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3638/">CVE-2009-3638</cve>
	<bugzilla href="https://bugzilla.suse.com/550072">SUSE bug 550072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3640</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3640" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3640" ref_url="https://www.suse.com/security/cve/CVE-2009-3640" source="SUSE CVE"/>
    <description>
    The update_cr8_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc1 does not properly handle the absence of an Advanced Programmable Interrupt Controller (APIC), which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via a call to the kvm_vcpu_ioctl function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3640/">CVE-2009-3640</cve>
	<bugzilla href="https://bugzilla.suse.com/549487">SUSE bug 549487</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3720</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3720" ref_url="https://www.suse.com/security/cve/CVE-2009-3720" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00014.html" source="SUSE-SU"/>
    <description>
    The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3720/">CVE-2009-3720</cve>
	<bugzilla href="https://bugzilla.suse.com/534721">SUSE bug 534721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550664">SUSE bug 550664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550666">SUSE bug 550666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/558892">SUSE bug 558892</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/561561">SUSE bug 561561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581162">SUSE bug 581162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581765">SUSE bug 581765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/611931">SUSE bug 611931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725950">SUSE bug 725950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334187" comment="python3 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481001" comment="apr-util-devel-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481002" comment="libapr-util1-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488345" comment="libapr-util1-dbd-mysql-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488346" comment="libapr-util1-dbd-pgsql-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488347" comment="libapr-util1-dbd-sqlite3-1.6.1-4.3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009780278" comment="libpython2_7-1_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009668174" comment="python-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780279" comment="python-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780280" comment="python-xml is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334187" comment="python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336487" comment="python3-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336488" comment="python3-dbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348258" comment="python3-idle is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339078" comment="python3-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3736</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3736" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3736" ref_url="https://www.suse.com/security/cve/CVE-2009-3736" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html" source="SUSE-SU"/>
    <description>
    ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3736/">CVE-2009-3736</cve>
	<bugzilla href="https://bugzilla.suse.com/556122">SUSE bug 556122</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487683" comment="libtool-32bit-2.4.6-1.406 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480609" comment="libltdl7-2.4.6-1.406 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480610" comment="libtool-2.4.6-1.406 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093889" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3889</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3889" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3889" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3889" ref_url="https://www.suse.com/security/cve/CVE-2009-3889" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
    <description>
    The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the (1) behavior and (2) logging level of the driver by modifying this file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3889/">CVE-2009-3889</cve>
	<bugzilla href="https://bugzilla.suse.com/555173">SUSE bug 555173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557180">SUSE bug 557180</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093894" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3894</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3894" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3894" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3894" ref_url="https://www.suse.com/security/cve/CVE-2009-3894" source="SUSE CVE"/>
    <description>
    Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3894/">CVE-2009-3894</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480201" comment="dstat-0.7.3-2.16 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3939</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3939" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3939" ref_url="https://www.suse.com/security/cve/CVE-2009-3939" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3939/">CVE-2009-3939</cve>
	<bugzilla href="https://bugzilla.suse.com/555173">SUSE bug 555173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557180">SUSE bug 557180</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3979</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3979" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3979" ref_url="https://www.suse.com/security/cve/CVE-2009-3979" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3979/">CVE-2009-3979</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3980</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3980" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3980" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3980" ref_url="https://www.suse.com/security/cve/CVE-2009-3980" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-08"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3980/">CVE-2009-3980</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3982</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3982" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3982" ref_url="https://www.suse.com/security/cve/CVE-2009-3982" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3982/">CVE-2009-3982</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3983</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3983" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3983" ref_url="https://www.suse.com/security/cve/CVE-2009-3983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3983/">CVE-2009-3983</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590499">SUSE bug 590499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607935">SUSE bug 607935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3984</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3984" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3984" ref_url="https://www.suse.com/security/cve/CVE-2009-3984" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3984/">CVE-2009-3984</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3985</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3985" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3985" ref_url="https://www.suse.com/security/cve/CVE-2009-3985" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3985/">CVE-2009-3985</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4012</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4012" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4012" ref_url="https://www.suse.com/security/cve/CVE-2009-4012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-4012/">CVE-2009-4012</cve>
	<bugzilla href="https://bugzilla.suse.com/569615">SUSE bug 569615</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480757" comment="libthai-data-0.1.27-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480758" comment="libthai0-0.1.27-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482431" comment="libthai-devel-0.1.27-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486507" comment="libthai0-32bit-0.1.27-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4019</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4019" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4019" ref_url="https://www.suse.com/security/cve/CVE-2009-4019" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00006.html" source="SUSE-SU"/>
    <description>
    mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-4019/">CVE-2009-4019</cve>
	<bugzilla href="https://bugzilla.suse.com/557669">SUSE bug 557669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/604528">SUSE bug 604528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4020</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4020" ref_url="https://www.suse.com/security/cve/CVE-2009-4020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0781-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0812-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4020/">CVE-2009-4020</cve>
	<bugzilla href="https://bugzilla.suse.com/564374">SUSE bug 564374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/605463">SUSE bug 605463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/760902">SUSE bug 760902</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4022</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4022" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4022" ref_url="https://www.suse.com/security/cve/CVE-2009-4022" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:059" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4022/">CVE-2009-4022</cve>
	<bugzilla href="https://bugzilla.suse.com/558260">SUSE bug 558260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/570912">SUSE bug 570912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/644911">SUSE bug 644911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4026</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4026" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4026" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4026" ref_url="https://www.suse.com/security/cve/CVE-2009-4026" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
    <description>
    The mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (panic) via a crafted Delete Block ACK (aka DELBA) packet, related to an erroneous "code shuffling patch."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4026/">CVE-2009-4026</cve>
	<bugzilla href="https://bugzilla.suse.com/558267">SUSE bug 558267</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094027" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4027</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4027" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4027" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4027" ref_url="https://www.suse.com/security/cve/CVE-2009-4027" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
    <description>
    Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation session.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-04"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4027/">CVE-2009-4027</cve>
	<bugzilla href="https://bugzilla.suse.com/558267">SUSE bug 558267</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4028</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4028" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4028" ref_url="https://www.suse.com/security/cve/CVE-2009-4028" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00006.html" source="SUSE-SU"/>
    <description>
    The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4028/">CVE-2009-4028</cve>
	<bugzilla href="https://bugzilla.suse.com/557669">SUSE bug 557669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/604528">SUSE bug 604528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4029</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4029" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4029" ref_url="https://www.suse.com/security/cve/CVE-2009-4029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000578.html" source="SUSE-SU"/>
    <description>
    The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4029/">CVE-2009-4029</cve>
	<bugzilla href="https://bugzilla.suse.com/559815">SUSE bug 559815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/770618">SUSE bug 770618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786745">SUSE bug 786745</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480076" comment="automake-1.15.1-2.145 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480077" comment="m4-1.4.18-2.138 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4030</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4030" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4030" ref_url="https://www.suse.com/security/cve/CVE-2009-4030" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00006.html" source="SUSE-SU"/>
    <description>
    MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4030/">CVE-2009-4030</cve>
	<bugzilla href="https://bugzilla.suse.com/557669">SUSE bug 557669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/604528">SUSE bug 604528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4031</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4031" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4031" ref_url="https://www.suse.com/security/cve/CVE-2009-4031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00053.html" source="SUSE-SU"/>
    <description>
    The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4031/">CVE-2009-4031</cve>
	<bugzilla href="https://bugzilla.suse.com/558269">SUSE bug 558269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/558662">SUSE bug 558662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4067</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4067" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4067" ref_url="https://www.suse.com/security/cve/CVE-2009-4067" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:042" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-23"/>
	<updated date="2023-02-23"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2009-4067/">CVE-2009-4067</cve>
	<bugzilla href="https://bugzilla.suse.com/706375">SUSE bug 706375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4131</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4131" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4131" ref_url="https://www.suse.com/security/cve/CVE-2009-4131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
    <description>
    The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel before 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4131/">CVE-2009-4131</cve>
	<bugzilla href="https://bugzilla.suse.com/561018">SUSE bug 561018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/564380">SUSE bug 564380</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4138</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4138" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4138" ref_url="https://www.suse.com/security/cve/CVE-2009-4138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4138/">CVE-2009-4138</cve>
	<bugzilla href="https://bugzilla.suse.com/564712">SUSE bug 564712</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4273</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4273" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4273" ref_url="https://www.suse.com/security/cve/CVE-2009-4273" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0166-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00032.html" source="SUSE-SU"/>
    <description>
    stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-4273/">CVE-2009-4273</cve>
	<bugzilla href="https://bugzilla.suse.com/574243">SUSE bug 574243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487788" comment="systemtap-3.2-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487789" comment="systemtap-runtime-3.2-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487790" comment="systemtap-sdt-devel-3.2-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487791" comment="systemtap-server-3.2-7.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094306" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4306</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4306" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4306" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4306" ref_url="https://www.suse.com/security/cve/CVE-2009-4306" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel 2.6.32-git6 and earlier allows local users to cause a denial of service (filesystem corruption) via unknown vectors, a different vulnerability than CVE-2009-4131.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4306/">CVE-2009-4306</cve>
	<bugzilla href="https://bugzilla.suse.com/564380">SUSE bug 564380</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4307</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4307" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4307" ref_url="https://www.suse.com/security/cve/CVE-2009-4307" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
    <description>
    The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 2.6.32-git6 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value).
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4307/">CVE-2009-4307</cve>
	<bugzilla href="https://bugzilla.suse.com/564381">SUSE bug 564381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/757278">SUSE bug 757278</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4308</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4308" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4308" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4308" ref_url="https://www.suse.com/security/cve/CVE-2009-4308" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    The ext4_decode_error function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel before 2.6.32 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference), and possibly have unspecified other impact, via a crafted read-only filesystem that lacks a journal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4308/">CVE-2009-4308</cve>
	<bugzilla href="https://bugzilla.suse.com/564382">SUSE bug 564382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4536</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4536" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4536" ref_url="https://www.suse.com/security/cve/CVE-2009-4536" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
    <description>
    drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4536/">CVE-2009-4536</cve>
	<bugzilla href="https://bugzilla.suse.com/567376">SUSE bug 567376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/583434">SUSE bug 583434</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4537</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4537" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4537" ref_url="https://www.suse.com/security/cve/CVE-2009-4537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to (1) cause a denial of service (temporary network outage) via a packet with a crafted size, in conjunction with certain packets containing A characters and certain packets containing E characters; or (2) cause a denial of service (system crash) via a packet with a crafted size, in conjunction with certain packets containing '\0' characters, related to the value of the status register and erroneous behavior associated with the RxMaxSize register.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1389.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-11"/>
	<updated date="2023-07-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4537/">CVE-2009-4537</cve>
	<bugzilla href="https://bugzilla.suse.com/567376">SUSE bug 567376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4538</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4538" ref_url="https://www.suse.com/security/cve/CVE-2009-4538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
    <description>
    drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-23"/>
	<updated date="2023-07-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-4538/">CVE-2009-4538</cve>
	<bugzilla href="https://bugzilla.suse.com/567376">SUSE bug 567376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5029</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5029" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5029" ref_url="https://www.suse.com/security/cve/CVE-2009-5029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0033-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-403" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00016.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5029/">CVE-2009-5029</cve>
	<bugzilla href="https://bugzilla.suse.com/735850">SUSE bug 735850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/736174">SUSE bug 736174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/759836">SUSE bug 759836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826666">SUSE bug 826666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5030</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5030" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5030" ref_url="https://www.suse.com/security/cve/CVE-2009-5030" source="SUSE CVE"/>
    <description>
    The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-5030/">CVE-2009-5030</cve>
	<bugzilla href="https://bugzilla.suse.com/757260">SUSE bug 757260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5031</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5031" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5031" ref_url="https://www.suse.com/security/cve/CVE-2009-5031" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1331-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1342-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html" source="SUSE-SU"/>
    <description>
    ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks via a single quote in a request parameter in the Content-Disposition field of a request with a multipart/form-data Content-Type header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5031/">CVE-2009-5031</cve>
	<bugzilla href="https://bugzilla.suse.com/768293">SUSE bug 768293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488116" comment="apache2-mod_security2-2.9.2-1.34 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5044</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5044" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5044" ref_url="https://www.suse.com/security/cve/CVE-2009-5044" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0642-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00029.html" source="SUSE-SU"/>
    <description>
    contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-5044/">CVE-2009-5044</cve>
	<bugzilla href="https://bugzilla.suse.com/698290">SUSE bug 698290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/703666">SUSE bug 703666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480306" comment="groff-1.22.3-3.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480307" comment="groff-full-1.22.3-3.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480308" comment="gxditview-1.22.3-3.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5064</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5064" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5064" ref_url="https://www.suse.com/security/cve/CVE-2009-5064" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks.  NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5064/">CVE-2009-5064</cve>
	<bugzilla href="https://bugzilla.suse.com/677787">SUSE bug 677787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/684385">SUSE bug 684385</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5080</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5080" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5080" ref_url="https://www.suse.com/security/cve/CVE-2009-5080" source="SUSE CVE"/>
    <description>
    The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-5080/">CVE-2009-5080</cve>
	<bugzilla href="https://bugzilla.suse.com/703665">SUSE bug 703665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480306" comment="groff-1.22.3-3.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480307" comment="groff-full-1.22.3-3.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480308" comment="gxditview-1.22.3-3.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5081</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5081" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5081" ref_url="https://www.suse.com/security/cve/CVE-2009-5081" source="SUSE CVE"/>
    <description>
    The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-5081/">CVE-2009-5081</cve>
	<bugzilla href="https://bugzilla.suse.com/703666">SUSE bug 703666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480306" comment="groff-1.22.3-3.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480307" comment="groff-full-1.22.3-3.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480308" comment="gxditview-1.22.3-3.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5147</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5147" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5147" ref_url="https://www.suse.com/security/cve/CVE-2009-5147" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001661.html" source="SUSE-SU"/>
    <description>
    DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2009-5147/">CVE-2009-5147</cve>
	<bugzilla href="https://bugzilla.suse.com/939860">SUSE bug 939860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959495">SUSE bug 959495</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5155</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5155" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5155" ref_url="https://www.suse.com/security/cve/CVE-2009-5155" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005729.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1958-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1958-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005821.html" source="SUSE-SU"/>
    <description>
    In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2009-5155/">CVE-2009-5155</cve>
	<bugzilla href="https://bugzilla.suse.com/1127223">SUSE bug 1127223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009490317" comment="glibc-2.26-13.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490318" comment="glibc-32bit-2.26-13.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490319" comment="glibc-devel-2.26-13.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490320" comment="glibc-extra-2.26-13.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490321" comment="glibc-i18ndata-2.26-13.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490322" comment="glibc-info-2.26-13.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490323" comment="glibc-locale-2.26-13.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490324" comment="glibc-locale-base-2.26-13.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490325" comment="glibc-profile-2.26-13.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490326" comment="nscd-2.26-13.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009496047" comment="glibc-devel-32bit-2.26-13.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496048" comment="glibc-devel-static-2.26-13.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496049" comment="glibc-utils-2.26-13.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0001</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0001" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0001" ref_url="https://www.suse.com/security/cve/CVE-2010-0001" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0001/">CVE-2010-0001</cve>
	<bugzilla href="https://bugzilla.suse.com/570331">SUSE bug 570331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/588113">SUSE bug 588113</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480324" comment="gzip-1.9-2.21 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0003</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0003" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0003" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0003" ref_url="https://www.suse.com/security/cve/CVE-2010-0003" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0003/">CVE-2010-0003</cve>
	<bugzilla href="https://bugzilla.suse.com/569902">SUSE bug 569902</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0006</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0006" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0006" ref_url="https://www.suse.com/security/cve/CVE-2010-0006" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.32.4, when network namespaces are enabled, allows remote attackers to cause a denial of service (NULL pointer dereference) via an invalid IPv6 jumbogram, a related issue to CVE-2007-4567.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0006/">CVE-2010-0006</cve>
	<bugzilla href="https://bugzilla.suse.com/570608">SUSE bug 570608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0007</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0007" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0007" ref_url="https://www.suse.com/security/cve/CVE-2010-0007" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
    <description>
    net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0007/">CVE-2010-0007</cve>
	<bugzilla href="https://bugzilla.suse.com/570602">SUSE bug 570602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/570606">SUSE bug 570606</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0008</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0008" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0008" ref_url="https://www.suse.com/security/cve/CVE-2010-0008" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
    <description>
    The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0008/">CVE-2010-0008</cve>
	<bugzilla href="https://bugzilla.suse.com/586195">SUSE bug 586195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0013</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0013" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0013" ref_url="https://www.suse.com/security/cve/CVE-2010-0013" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00052.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0013/">CVE-2010-0013</cve>
	<bugzilla href="https://bugzilla.suse.com/567799">SUSE bug 567799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/569616">SUSE bug 569616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581201">SUSE bug 581201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0159</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0159" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0159" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0159" ref_url="https://www.suse.com/security/cve/CVE-2010-0159" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-17"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0159/">CVE-2010-0159</cve>
	<bugzilla href="https://bugzilla.suse.com/576969">SUSE bug 576969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581160">SUSE bug 581160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/584499">SUSE bug 584499</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0164</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0164" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0164" ref_url="https://www.suse.com/security/cve/CVE-2010-0164" source="SUSE CVE"/>
    <description>
    Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace animation in which the frames have different bits-per-pixel (bpp) values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0164/">CVE-2010-0164</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0165</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0165" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0165" ref_url="https://www.suse.com/security/cve/CVE-2010-0165" source="SUSE CVE"/>
    <description>
    The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors involving certain indirect calls to the JavaScript eval function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0165/">CVE-2010-0165</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0166</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0166" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0166" ref_url="https://www.suse.com/security/cve/CVE-2010-0166" source="SUSE CVE"/>
    <description>
    The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perform certain deletions, which allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via an HTML document containing invisible Unicode characters, as demonstrated by the U+FEFF, U+FFF9, U+FFFA, and U+FFFB characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0166/">CVE-2010-0166</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0167</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0167" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0167" ref_url="https://www.suse.com/security/cve/CVE-2010-0167" source="SUSE CVE"/>
    <description>
    The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0167/">CVE-2010-0167</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0168</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0168" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0168" ref_url="https://www.suse.com/security/cve/CVE-2010-0168" source="SUSE CVE"/>
    <description>
    The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image's URL, which might allow remote attackers to cause a denial of service (application crash or hang) or hijack the functionality of the browser's add-ons via a crafted SRC attribute of an IMG element, as demonstrated by remote command execution through an ssh: URL in a configuration that supports gnome-vfs with a nonstandard network.gnomevfs.supported-protocols setting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0168/">CVE-2010-0168</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0169</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0169" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0169" ref_url="https://www.suse.com/security/cve/CVE-2010-0169" source="SUSE CVE"/>
    <description>
    The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0169/">CVE-2010-0169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0170</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0170" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0170" ref_url="https://www.suse.com/security/cve/CVE-2010-0170" source="SUSE CVE"/>
    <description>
    Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors that are specific to each affected plugin.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0170/">CVE-2010-0170</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0171</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0171" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0171" ref_url="https://www.suse.com/security/cve/CVE-2010-0171" source="SUSE CVE"/>
    <description>
    Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0171/">CVE-2010-0171</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0172</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0172" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0172" ref_url="https://www.suse.com/security/cve/CVE-2010-0172" source="SUSE CVE"/>
    <description>
    toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorization requests from multiple web sites, which might allow remote web servers to spoof an authorization dialog and capture credentials by demanding HTTP authentication in opportunistic circumstances.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0172/">CVE-2010-0172</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0173</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0173" ref_url="https://www.suse.com/security/cve/CVE-2010-0173" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0173/">CVE-2010-0173</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0174</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0174" ref_url="https://www.suse.com/security/cve/CVE-2010-0174" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0174/">CVE-2010-0174</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0175</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0175" ref_url="https://www.suse.com/security/cve/CVE-2010-0175" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0175/">CVE-2010-0175</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0176</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0176" ref_url="https://www.suse.com/security/cve/CVE-2010-0176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0176/">CVE-2010-0176</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0177</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0177" ref_url="https://www.suse.com/security/cve/CVE-2010-0177" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0177/">CVE-2010-0177</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0178</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0178" ref_url="https://www.suse.com/security/cve/CVE-2010-0178" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0178/">CVE-2010-0178</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0181</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0181" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0181" ref_url="https://www.suse.com/security/cve/CVE-2010-0181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many images.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0181/">CVE-2010-0181</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0182</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0182" ref_url="https://www.suse.com/security/cve/CVE-2010-0182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0182/">CVE-2010-0182</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0220</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0220" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0220" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0220" ref_url="https://www.suse.com/security/cve/CVE-2010-0220" source="SUSE CVE"/>
    <description>
    The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0220/">CVE-2010-0220</cve>
	<bugzilla href="https://bugzilla.suse.com/568011">SUSE bug 568011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/584499">SUSE bug 584499</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0277</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0277" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0277" ref_url="https://www.suse.com/security/cve/CVE-2010-0277" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00052.html" source="SUSE-SU"/>
    <description>
    slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0277/">CVE-2010-0277</cve>
	<bugzilla href="https://bugzilla.suse.com/567799">SUSE bug 567799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/569616">SUSE bug 569616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581201">SUSE bug 581201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0307</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0307" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0307" ref_url="https://www.suse.com/security/cve/CVE-2010-0307" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00003.html" source="SUSE-SU"/>
    <description>
    The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0307/">CVE-2010-0307</cve>
	<bugzilla href="https://bugzilla.suse.com/575644">SUSE bug 575644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0405</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0405" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0405" ref_url="https://www.suse.com/security/cve/CVE-2010-0405" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0684-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00058.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0405/">CVE-2010-0405</cve>
	<bugzilla href="https://bugzilla.suse.com/636978">SUSE bug 636978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646682">SUSE bug 646682</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480109" comment="bzip2-1.0.6-3.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480110" comment="libbz2-1-1.0.6-3.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480111" comment="libbz2-1-32bit-1.0.6-3.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480112" comment="libbz2-devel-1.0.6-3.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0408</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0408" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0408" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0408" ref_url="https://www.suse.com/security/cve/CVE-2010-0408" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0165-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00084.html" source="SUSE-SU"/>
    <description>
    The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0408/">CVE-2010-0408</cve>
	<bugzilla href="https://bugzilla.suse.com/586572">SUSE bug 586572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/601151">SUSE bug 601151</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0410</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0410" ref_url="https://www.suse.com/security/cve/CVE-2010-0410" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00053.html" source="SUSE-SU"/>
    <description>
    drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and system crash) by sending the kernel many NETLINK_CONNECTOR messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0410/">CVE-2010-0410</cve>
	<bugzilla href="https://bugzilla.suse.com/576927">SUSE bug 576927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/605463">SUSE bug 605463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0411</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0411" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0411" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0411" ref_url="https://www.suse.com/security/cve/CVE-2010-0411" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0166-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00032.html" source="SUSE-SU"/>
    <description>
    Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0411/">CVE-2010-0411</cve>
	<bugzilla href="https://bugzilla.suse.com/574243">SUSE bug 574243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/577382">SUSE bug 577382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487788" comment="systemtap-3.2-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487789" comment="systemtap-runtime-3.2-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487790" comment="systemtap-sdt-devel-3.2-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487791" comment="systemtap-server-3.2-7.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0412</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0412" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0412" ref_url="https://www.suse.com/security/cve/CVE-2010-0412" source="SUSE CVE"/>
    <description>
    stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0412/">CVE-2010-0412</cve>
	<bugzilla href="https://bugzilla.suse.com/574243">SUSE bug 574243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487788" comment="systemtap-3.2-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487789" comment="systemtap-runtime-3.2-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487790" comment="systemtap-sdt-devel-3.2-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487791" comment="systemtap-server-3.2-7.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0415</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0415" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0415" ref_url="https://www.suse.com/security/cve/CVE-2010-0415" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel's node set.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0415/">CVE-2010-0415</cve>
	<bugzilla href="https://bugzilla.suse.com/577753">SUSE bug 577753</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0420</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0420" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0420" ref_url="https://www.suse.com/security/cve/CVE-2010-0420" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00052.html" source="SUSE-SU"/>
    <description>
    libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nicknames containing &lt;br&gt; sequences, which allows remote attackers to cause a denial of service (application crash) via a crafted nickname.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0420/">CVE-2010-0420</cve>
	<bugzilla href="https://bugzilla.suse.com/569616">SUSE bug 569616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581201">SUSE bug 581201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0423</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0423" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0423" ref_url="https://www.suse.com/security/cve/CVE-2010-0423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00052.html" source="SUSE-SU"/>
    <description>
    gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0423/">CVE-2010-0423</cve>
	<bugzilla href="https://bugzilla.suse.com/569616">SUSE bug 569616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581201">SUSE bug 581201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0424</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0424" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0424" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0424" ref_url="https://www.suse.com/security/cve/CVE-2010-0424" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
    <description>
    The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-0424/">CVE-2010-0424</cve>
	<bugzilla href="https://bugzilla.suse.com/579447">SUSE bug 579447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/580800">SUSE bug 580800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/589640">SUSE bug 589640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590353">SUSE bug 590353</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480153" comment="cron-4.2-4.45 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480154" comment="cronie-1.5.1-4.45 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0425</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0425" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0425" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0425" ref_url="https://www.suse.com/security/cve/CVE-2010-0425" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003365.html" source="SUSE-SU"/>
    <description>
    modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0425/">CVE-2010-0425</cve>
	<bugzilla href="https://bugzilla.suse.com/1078450">SUSE bug 1078450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/586572">SUSE bug 586572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/601151">SUSE bug 601151</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0434</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0434" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0434" ref_url="https://www.suse.com/security/cve/CVE-2010-0434" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0165-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00084.html" source="SUSE-SU"/>
    <description>
    The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0434/">CVE-2010-0434</cve>
	<bugzilla href="https://bugzilla.suse.com/586572">SUSE bug 586572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/601151">SUSE bug 601151</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0623</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0623" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0623" ref_url="https://www.suse.com/security/cve/CVE-2010-0623" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The futex_lock_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly manage a certain reference count, which allows local users to cause a denial of service (OOPS) via vectors involving an unmount of an ext3 filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0623/">CVE-2010-0623</cve>
	<bugzilla href="https://bugzilla.suse.com/579439">SUSE bug 579439</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0624</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0624" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0624" ref_url="https://www.suse.com/security/cve/CVE-2010-0624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0189-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00044.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0624/">CVE-2010-0624</cve>
	<bugzilla href="https://bugzilla.suse.com/579475">SUSE bug 579475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/608034">SUSE bug 608034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338991" comment="cpio is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715283" comment="cpio-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009732296" comment="cpio-mt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727666" comment="tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727667" comment="tar-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727668" comment="tar-rmt is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338991" comment="cpio is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727666" comment="tar is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480145" comment="cpio-2.12-1.439 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480146" comment="cpio-lang-2.12-1.439 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480147" comment="cpio-mt-2.12-1.439 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481663" comment="tar-1.30-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481664" comment="tar-lang-1.30-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481665" comment="tar-rmt-1.30-3.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009727666" comment="tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727667" comment="tar-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727668" comment="tar-rmt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0654</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0654" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0654" ref_url="https://www.suse.com/security/cve/CVE-2010-0654" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-4" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0654/">CVE-2010-0654</cve>
	<bugzilla href="https://bugzilla.suse.com/583603">SUSE bug 583603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0730</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0730" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0730" ref_url="https://www.suse.com/security/cve/CVE-2010-0730" source="SUSE CVE"/>
    <description>
    The MMIO instruction decoder in the Xen hypervisor in the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows guest OS users to cause a denial of service (32-bit guest OS crash) via vectors that trigger an unspecified instruction emulation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-0730/">CVE-2010-0730</cve>
	<bugzilla href="https://bugzilla.suse.com/601231">SUSE bug 601231</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0740</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0740" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0740" ref_url="https://www.suse.com/security/cve/CVE-2010-0740" source="SUSE CVE"/>
    <description>
    The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0740/">CVE-2010-0740</cve>
	<bugzilla href="https://bugzilla.suse.com/590833">SUSE bug 590833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0741</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0741" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0741" ref_url="https://www.suse.com/security/cve/CVE-2010-0741" source="SUSE CVE"/>
    <description>
    The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0741/">CVE-2010-0741</cve>
	<bugzilla href="https://bugzilla.suse.com/596032">SUSE bug 596032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0742</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0742" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0742" ref_url="https://www.suse.com/security/cve/CVE-2010-0742" source="SUSE CVE"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
    <description>
    The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0742/">CVE-2010-0742</cve>
	<bugzilla href="https://bugzilla.suse.com/610642">SUSE bug 610642</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0750</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0750" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0750" ref_url="https://www.suse.com/security/cve/CVE-2010-0750" source="SUSE CVE"/>
    <description>
    pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0750/">CVE-2010-0750</cve>
	<bugzilla href="https://bugzilla.suse.com/593959">SUSE bug 593959</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481468" comment="libpolkit0-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481469" comment="polkit-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481470" comment="polkit-devel-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481471" comment="typelib-1_0-Polkit-1_0-0.114-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0831</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0831" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0831" ref_url="https://www.suse.com/security/cve/CVE-2010-0831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1632-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000621.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0831/">CVE-2010-0831</cve>
	<bugzilla href="https://bugzilla.suse.com/1188517">SUSE bug 1188517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607043">SUSE bug 607043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607762">SUSE bug 607762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/818591">SUSE bug 818591</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625483" comment="fastjar is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1121</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1121" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1121" ref_url="https://www.suse.com/security/cve/CVE-2010-1121" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1121/">CVE-2010-1121</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1125</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1125" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1125" ref_url="https://www.suse.com/security/cve/CVE-2010-1125" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
    <description>
    The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1125/">CVE-2010-1125</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1148</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1148" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1148" ref_url="https://www.suse.com/security/cve/CVE-2010-1148" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The cifs_create function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a NULL nameidata (aka nd) field in a POSIX file-creation request to a server that supports UNIX extensions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1148/">CVE-2010-1148</cve>
	<bugzilla href="https://bugzilla.suse.com/593940">SUSE bug 593940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1162</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1162" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1162" ref_url="https://www.suse.com/security/cve/CVE-2010-1162" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The release_one_tty function in drivers/char/tty_io.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the put_pid function, which has unspecified impact and local attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-1162/">CVE-2010-1162</cve>
	<bugzilla href="https://bugzilla.suse.com/596462">SUSE bug 596462</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1163</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1163" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1163" ref_url="https://www.suse.com/security/cve/CVE-2010-1163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0050-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00022.html" source="SUSE-SU"/>
    <description>
    The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1163/">CVE-2010-1163</cve>
	<bugzilla href="https://bugzilla.suse.com/594738">SUSE bug 594738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481659" comment="sudo-1.8.22-4.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481660" comment="sudo-devel-1.8.22-4.3.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1167</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1167" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1167" ref_url="https://www.suse.com/security/cve/CVE-2010-1167" source="SUSE CVE"/>
    <description>
    fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted (1) message header or (2) POP3 UIDL list.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1167/">CVE-2010-1167</cve>
	<bugzilla href="https://bugzilla.suse.com/597673">SUSE bug 597673</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480228" comment="fetchmail-6.3.26-3.27 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482674" comment="fetchmailconf-6.3.26-3.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1172</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1172" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1172" ref_url="https://www.suse.com/security/cve/CVE-2010-1172" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0968-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0300-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0300-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00025.html" source="SUSE-SU"/>
    <description>
    DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1172/">CVE-2010-1172</cve>
	<bugzilla href="https://bugzilla.suse.com/628607">SUSE bug 628607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633621">SUSE bug 633621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633622">SUSE bug 633622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633623">SUSE bug 633623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633629">SUSE bug 633629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633637">SUSE bug 633637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633639">SUSE bug 633639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633648">SUSE bug 633648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633652">SUSE bug 633652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633653">SUSE bug 633653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633654">SUSE bug 633654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633658">SUSE bug 633658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633660">SUSE bug 633660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633678">SUSE bug 633678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633679">SUSE bug 633679</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633681">SUSE bug 633681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633682">SUSE bug 633682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633685">SUSE bug 633685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633686">SUSE bug 633686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633700">SUSE bug 633700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633701">SUSE bug 633701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633702">SUSE bug 633702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480190" comment="dbus-1-glib-0.108-1.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480191" comment="dbus-1-glib-32bit-0.108-1.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480192" comment="dbus-1-glib-devel-0.108-1.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480193" comment="dbus-1-glib-tool-0.108-1.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1173</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1173" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1173" ref_url="https://www.suse.com/security/cve/CVE-2010-1173" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-1173/">CVE-2010-1173</cve>
	<bugzilla href="https://bugzilla.suse.com/600375">SUSE bug 600375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/702025">SUSE bug 702025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941110">SUSE bug 941110</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1188</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1188" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1188" ref_url="https://www.suse.com/security/cve/CVE-2010-1188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service (kernel panic) via a SYN packet while the socket is in a listening (TCP_LISTEN) state, which is not properly handled and causes the skb structure to be freed.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-1188/">CVE-2010-1188</cve>
	<bugzilla href="https://bugzilla.suse.com/592571">SUSE bug 592571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1196</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1196" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1196" ref_url="https://www.suse.com/security/cve/CVE-2010-1196" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1196/">CVE-2010-1196</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1197</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1197" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1197" ref_url="https://www.suse.com/security/cve/CVE-2010-1197" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1197/">CVE-2010-1197</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1198</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1198" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1198" ref_url="https://www.suse.com/security/cve/CVE-2010-1198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1198/">CVE-2010-1198</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1199</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1199" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1199" ref_url="https://www.suse.com/security/cve/CVE-2010-1199" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1199/">CVE-2010-1199</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1200</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1200" ref_url="https://www.suse.com/security/cve/CVE-2010-1200" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1200/">CVE-2010-1200</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1201</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1201" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1201" ref_url="https://www.suse.com/security/cve/CVE-2010-1201" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1201/">CVE-2010-1201</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1202</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1202" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1202" ref_url="https://www.suse.com/security/cve/CVE-2010-1202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1202/">CVE-2010-1202</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1203</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1203" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1203" ref_url="https://www.suse.com/security/cve/CVE-2010-1203" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1203/">CVE-2010-1203</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1205</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1205" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1205" ref_url="https://www.suse.com/security/cve/CVE-2010-1205" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-4" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0594-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-1205/">CVE-2010-1205</cve>
	<bugzilla href="https://bugzilla.suse.com/1188284">SUSE bug 1188284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617866">SUSE bug 617866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/639941">SUSE bug 639941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854395">SUSE bug 854395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1206</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1206" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1206" ref_url="https://www.suse.com/security/cve/CVE-2010-1206" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
    <description>
    The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1206/">CVE-2010-1206</cve>
	<bugzilla href="https://bugzilla.suse.com/618183">SUSE bug 618183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1207</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1207" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1207" ref_url="https://www.suse.com/security/cve/CVE-2010-1207" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1207/">CVE-2010-1207</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1208</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1208" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1208" ref_url="https://www.suse.com/security/cve/CVE-2010-1208" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event attribute node with a nonzero reference count.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1208/">CVE-2010-1208</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1209</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1209" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1209" ref_url="https://www.suse.com/security/cve/CVE-2010-1209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator interface and a javascript callback.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1209/">CVE-2010-1209</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1210</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1210" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1210" ref_url="https://www.suse.com/security/cve/CVE-2010-1210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
    <description>
    intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted 8-bit text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1210/">CVE-2010-1210</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1211</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1211" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1211" ref_url="https://www.suse.com/security/cve/CVE-2010-1211" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1211/">CVE-2010-1211</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1212</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1212" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1212" ref_url="https://www.suse.com/security/cve/CVE-2010-1212" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) propagation of deep aborts in the TraceRecorder::record_JSOP_BINDNAME function, (2) depth handling in the TraceRecorder::record_JSOP_GETELEM function, and (3) tracing of out-of-range arguments in the TraceRecorder::record_JSOP_ARGSUB function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1212/">CVE-2010-1212</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1213</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1213" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1213" ref_url="https://www.suse.com/security/cve/CVE-2010-1213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-4" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1213/">CVE-2010-1213</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1214</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1214" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1214" ref_url="https://www.suse.com/security/cve/CVE-2010-1214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1214/">CVE-2010-1214</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1215</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1215" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1215" ref_url="https://www.suse.com/security/cve/CVE-2010-1215" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka SJOW) wrapper, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging "access to an object from the chrome scope."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1215/">CVE-2010-1215</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1436</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1436" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1436" ref_url="https://www.suse.com/security/cve/CVE-2010-1436" source="SUSE CVE"/>
    <description>
    gfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the gfs2_quota struct occupies two separate pages, which allows local users to cause a denial of service (kernel panic) via certain manipulations that cause an out-of-bounds write, as demonstrated by writing from an ext3 file system to a gfs2 file system.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1436/">CVE-2010-1436</cve>
	<bugzilla href="https://bugzilla.suse.com/599957">SUSE bug 599957</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1437</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1437" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1437" ref_url="https://www.suse.com/security/cve/CVE-2010-1437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-1437/">CVE-2010-1437</cve>
	<bugzilla href="https://bugzilla.suse.com/599955">SUSE bug 599955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1452</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1452" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1452" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1452" ref_url="https://www.suse.com/security/cve/CVE-2010-1452" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1000-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00009.html" source="SUSE-SU"/>
    <description>
    The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1452/">CVE-2010-1452</cve>
	<bugzilla href="https://bugzilla.suse.com/627030">SUSE bug 627030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1585</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1585" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1585" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1585" ref_url="https://www.suse.com/security/cve/CVE-2010-1585" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0169-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 does not properly sanitize HTML in a chrome document, which makes it easier for remote attackers to execute arbitrary JavaScript with chrome privileges via a javascript: URI in input to an extension, as demonstrated by a javascript:alert sequence in (1) the HREF attribute of an A element or (2) the ACTION attribute of a FORM element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1585/">CVE-2010-1585</cve>
	<bugzilla href="https://bugzilla.suse.com/667155">SUSE bug 667155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679570">SUSE bug 679570</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1623</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1623" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1623" ref_url="https://www.suse.com/security/cve/CVE-2010-1623" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0859-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00001.html" source="SUSE-SU"/>
    <description>
    Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1623/">CVE-2010-1623</cve>
	<bugzilla href="https://bugzilla.suse.com/650435">SUSE bug 650435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/693778">SUSE bug 693778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725950">SUSE bug 725950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/997229">SUSE bug 997229</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481001" comment="apr-util-devel-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481002" comment="libapr-util1-1.6.1-4.3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488345" comment="libapr-util1-dbd-mysql-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488346" comment="libapr-util1-dbd-pgsql-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488347" comment="libapr-util1-dbd-sqlite3-1.6.1-4.3.8 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1624</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1624" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1624" ref_url="https://www.suse.com/security/cve/CVE-2010-1624" source="SUSE CVE"/>
    <description>
    The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1624/">CVE-2010-1624</cve>
	<bugzilla href="https://bugzilla.suse.com/604225">SUSE bug 604225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1633</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1633" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1633" ref_url="https://www.suse.com/security/cve/CVE-2010-1633" source="SUSE CVE"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
    <description>
    RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory upon failure, which might allow context-dependent attackers to bypass intended key requirements or obtain sensitive information via unspecified vectors. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1633/">CVE-2010-1633</cve>
	<bugzilla href="https://bugzilla.suse.com/610642">SUSE bug 610642</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1636</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1636" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1636" ref_url="https://www.suse.com/security/cve/CVE-2010-1636" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only file descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1636/">CVE-2010-1636</cve>
	<bugzilla href="https://bugzilla.suse.com/606743">SUSE bug 606743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1641</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1641" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1641" ref_url="https://www.suse.com/security/cve/CVE-2010-1641" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The do_gfs2_set_flags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1641/">CVE-2010-1641</cve>
	<bugzilla href="https://bugzilla.suse.com/608576">SUSE bug 608576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1643</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1643" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1643" ref_url="https://www.suse.com/security/cve/CVE-2010-1643" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html" source="SUSE-SU"/>
    <description>
    mm/shmem.c in the Linux kernel before 2.6.28-rc3, when strict overcommit is enabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-03-01"/>
	<updated date="2023-03-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1643/">CVE-2010-1643</cve>
	<bugzilla href="https://bugzilla.suse.com/608933">SUSE bug 608933</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1646</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1646" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1646" ref_url="https://www.suse.com/security/cve/CVE-2010-1646" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0050-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00022.html" source="SUSE-SU"/>
    <description>
    The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1646/">CVE-2010-1646</cve>
	<bugzilla href="https://bugzilla.suse.com/594738">SUSE bug 594738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659701" comment="sudo-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481659" comment="sudo-1.8.22-4.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481660" comment="sudo-devel-1.8.22-4.3.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1674</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1674" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1674" ref_url="https://www.suse.com/security/cve/CVE-2010-1674" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0274-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0274-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00010.html" source="SUSE-SU"/>
    <description>
    The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1674/">CVE-2010-1674</cve>
	<bugzilla href="https://bugzilla.suse.com/654270">SUSE bug 654270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/685558">SUSE bug 685558</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488182" comment="libfpm_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488183" comment="libospf0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488184" comment="libospfapiclient0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488185" comment="libquagga_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488186" comment="libzebra1-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488187" comment="quagga-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488188" comment="quagga-devel-1.1.1-2.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1675</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1675" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1675" ref_url="https://www.suse.com/security/cve/CVE-2010-1675" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0274-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0274-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00010.html" source="SUSE-SU"/>
    <description>
    bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1675/">CVE-2010-1675</cve>
	<bugzilla href="https://bugzilla.suse.com/654270">SUSE bug 654270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/685558">SUSE bug 685558</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488182" comment="libfpm_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488183" comment="libospf0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488184" comment="libospfapiclient0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488185" comment="libquagga_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488186" comment="libzebra1-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488187" comment="quagga-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488188" comment="quagga-devel-1.1.1-2.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2065</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2065" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2065" ref_url="https://www.suse.com/security/cve/CVE-2010-2065" source="SUSE CVE"/>
    <description>
    Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2065/">CVE-2010-2065</cve>
	<bugzilla href="https://bugzilla.suse.com/612787">SUSE bug 612787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/612879">SUSE bug 612879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2066</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2066" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2066" ref_url="https://www.suse.com/security/cve/CVE-2010-2066" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as a donor.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2010-2066/">CVE-2010-2066</cve>
	<bugzilla href="https://bugzilla.suse.com/612457">SUSE bug 612457</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2067</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2067" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2067" ref_url="https://www.suse.com/security/cve/CVE-2010-2067" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0387-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0420-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00029.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2067/">CVE-2010-2067</cve>
	<bugzilla href="https://bugzilla.suse.com/612787">SUSE bug 612787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/612879">SUSE bug 612879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2068</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2068" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2068" ref_url="https://www.suse.com/security/cve/CVE-2010-2068" source="SUSE CVE"/>
    <description>
    mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2068/">CVE-2010-2068</cve>
	<bugzilla href="https://bugzilla.suse.com/627030">SUSE bug 627030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/627387">SUSE bug 627387</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2074</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2074" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2074" ref_url="https://www.suse.com/security/cve/CVE-2010-2074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="TID7002558" ref_url="https://www.suse.com/support/kb/doc?id=7002558" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0393-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00019.html" source="SUSE-SU"/>
    <description>
    istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2074/">CVE-2010-2074</cve>
	<bugzilla href="https://bugzilla.suse.com/609451">SUSE bug 609451</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2156</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2156" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2156" ref_url="https://www.suse.com/security/cve/CVE-2010-2156" source="SUSE CVE"/>
    <description>
    ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2156/">CVE-2010-2156</cve>
	<bugzilla href="https://bugzilla.suse.com/612546">SUSE bug 612546</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2226</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2226" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2226" ref_url="https://www.suse.com/security/cve/CVE-2010-2226" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-20"/>
	<updated date="2023-02-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2226/">CVE-2010-2226</cve>
	<bugzilla href="https://bugzilla.suse.com/615141">SUSE bug 615141</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2233</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2233" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2233" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2233" ref_url="https://www.suse.com/security/cve/CVE-2010-2233" source="SUSE CVE"/>
    <description>
    tif_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG input."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2233/">CVE-2010-2233</cve>
	<bugzilla href="https://bugzilla.suse.com/612879">SUSE bug 612879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2240</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2240" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2240" ref_url="https://www.suse.com/security/cve/CVE-2010-2240" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0644-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0561-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00064.html" source="SUSE-SU"/>
    <description>
    The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to the bottom page of a shared memory segment, as demonstrated by a memory-exhaustion attack against the X.Org X server.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2240/">CVE-2010-2240</cve>
	<bugzilla href="https://bugzilla.suse.com/1039348">SUSE bug 1039348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/211997">SUSE bug 211997</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/546062">SUSE bug 546062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/59807">SUSE bug 59807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/615929">SUSE bug 615929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/618152">SUSE bug 618152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/632737">SUSE bug 632737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/643986">SUSE bug 643986</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746947">SUSE bug 746947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746949">SUSE bug 746949</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2243</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2243" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2243" ref_url="https://www.suse.com/security/cve/CVE-2010-2243" source="SUSE CVE"/>
    <description>
    A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current_clocksource results in an OOPS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-2243/">CVE-2010-2243</cve>
	<bugzilla href="https://bugzilla.suse.com/617903">SUSE bug 617903</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2244</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2244" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2244" ref_url="https://www.suse.com/security/cve/CVE-2010-2244" source="SUSE CVE"/>
    <description>
    The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability than CVE-2008-5081.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2244/">CVE-2010-2244</cve>
	<bugzilla href="https://bugzilla.suse.com/603289">SUSE bug 603289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646961">SUSE bug 646961</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781769" comment="python3-avahi is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338989" comment="avahi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351364" comment="avahi-autoipd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351352" comment="avahi-compat-howl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351353" comment="avahi-compat-mDNSResponder-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351354" comment="avahi-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351355" comment="avahi-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351356" comment="libavahi-client3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351357" comment="libavahi-client3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351358" comment="libavahi-common3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351359" comment="libavahi-common3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351360" comment="libavahi-core7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351361" comment="libavahi-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351362" comment="libdns_sd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009351363" comment="libhowl0 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2248</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2248" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2248" ref_url="https://www.suse.com/security/cve/CVE-2010-2248" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
    <description>
    fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (panic) via an SMB response packet with an invalid CountHigh value, as demonstrated by a response from an OS/2 server, related to the CIFSSMBWrite and CIFSSMBWrite2 functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2248/">CVE-2010-2248</cve>
	<bugzilla href="https://bugzilla.suse.com/618156">SUSE bug 618156</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102322" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2322</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2322" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2322" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2322" ref_url="https://www.suse.com/security/cve/CVE-2010-2322" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2635-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1107-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AJWN7K3ZWIZYG5QW25KKFIGISFYTG2R3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2565-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OHWHBBR2CBRHE7HR6PAPJLGHP3QCHYHS/" source="SUSE-SU"/>
    <description>
    Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2010-2322/">CVE-2010-2322</cve>
	<bugzilla href="https://bugzilla.suse.com/1188517">SUSE bug 1188517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694232" comment="fastjar is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2492</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2492" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2492" ref_url="https://www.suse.com/security/cve/CVE-2010-2492" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of service (system crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-2492/">CVE-2010-2492</cve>
	<bugzilla href="https://bugzilla.suse.com/619850">SUSE bug 619850</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2494</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2494" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2494" ref_url="https://www.suse.com/security/cve/CVE-2010-2494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1648-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1650-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2494/">CVE-2010-2494</cve>
	<bugzilla href="https://bugzilla.suse.com/619847">SUSE bug 619847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488882" comment="bogofilter-common-1.2.4-1.40 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488883" comment="bogofilter-db-1.2.4-1.40 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2495</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2495" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2495" ref_url="https://www.suse.com/security/cve/CVE-2010-2495" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors related to a routing change.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2495/">CVE-2010-2495</cve>
	<bugzilla href="https://bugzilla.suse.com/616612">SUSE bug 616612</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2497</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2497" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2497" ref_url="https://www.suse.com/security/cve/CVE-2010-2497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0549-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00060.html" source="SUSE-SU"/>
    <description>
    Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2497/">CVE-2010-2497</cve>
	<bugzilla href="https://bugzilla.suse.com/619562">SUSE bug 619562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/635692">SUSE bug 635692</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2521</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2521" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2521" ref_url="https://www.suse.com/security/cve/CVE-2010-2521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service (panic) or possibly execute arbitrary code via a crafted NFSv4 compound WRITE request, related to the read_buf and nfsd4_decode_compound functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-12"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2521/">CVE-2010-2521</cve>
	<bugzilla href="https://bugzilla.suse.com/620372">SUSE bug 620372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2524</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2524" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2524" ref_url="https://www.suse.com/security/cve/CVE-2010-2524" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:039" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0592-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00009.html" source="SUSE-SU"/>
    <description>
    The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform arbitrary CIFS mounts via vectors involving an add_key call, related to a "cache stuffing" issue and MS-DFS referrals.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-2524/">CVE-2010-2524</cve>
	<bugzilla href="https://bugzilla.suse.com/627386">SUSE bug 627386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/627447">SUSE bug 627447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2528</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2528" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2528" ref_url="https://www.suse.com/security/cve/CVE-2010-2528" source="SUSE CVE"/>
    <description>
    The clientautoresp function in family_icbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via an X-Status message that lacks the expected end tag for a (1) desc or (2) title element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2528/">CVE-2010-2528</cve>
	<bugzilla href="https://bugzilla.suse.com/630965">SUSE bug 630965</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2529</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2529" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2529" ref_url="https://www.suse.com/security/cve/CVE-2010-2529" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service (hang) via a crafted echo response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2529/">CVE-2010-2529</cve>
	<bugzilla href="https://bugzilla.suse.com/620837">SUSE bug 620837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480331" comment="iputils-s20161105-6.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488276" comment="rarpd-s20161105-6.10 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2537</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2537" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2537" ref_url="https://www.suse.com/security/cve/CVE-2010-2537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:039" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0592-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00009.html" source="SUSE-SU"/>
    <description>
    The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this file as a donor.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-2537/">CVE-2010-2537</cve>
	<bugzilla href="https://bugzilla.suse.com/624587">SUSE bug 624587</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2547</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2547" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2547" ref_url="https://www.suse.com/security/cve/CVE-2010-2547" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0479-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00016.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc operation when importing the certificate or verifying its signature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2547/">CVE-2010-2547</cve>
	<bugzilla href="https://bugzilla.suse.com/625947">SUSE bug 625947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481170" comment="gpg2-2.2.5-4.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481171" comment="gpg2-lang-2.2.5-4.6.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2640</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2640" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2640" ref_url="https://www.suse.com/security/cve/CVE-2010-2640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0045-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00019.html" source="SUSE-SU"/>
    <description>
    Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2640/">CVE-2010-2640</cve>
	<bugzilla href="https://bugzilla.suse.com/660555">SUSE bug 660555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482660" comment="evince-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482661" comment="evince-devel-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482662" comment="evince-lang-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482663" comment="evince-plugin-djvudocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482664" comment="evince-plugin-dvidocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482665" comment="evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482666" comment="evince-plugin-psdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482667" comment="evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482668" comment="evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482669" comment="libevdocument3-4-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482670" comment="libevview3-3-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482671" comment="nautilus-evince-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482672" comment="typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482673" comment="typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-2.41 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2641</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2641" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2641" ref_url="https://www.suse.com/security/cve/CVE-2010-2641" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0045-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00019.html" source="SUSE-SU"/>
    <description>
    Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2641/">CVE-2010-2641</cve>
	<bugzilla href="https://bugzilla.suse.com/660555">SUSE bug 660555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482660" comment="evince-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482661" comment="evince-devel-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482662" comment="evince-lang-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482663" comment="evince-plugin-djvudocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482664" comment="evince-plugin-dvidocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482665" comment="evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482666" comment="evince-plugin-psdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482667" comment="evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482668" comment="evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482669" comment="libevdocument3-4-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482670" comment="libevview3-3-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482671" comment="nautilus-evince-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482672" comment="typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482673" comment="typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-2.41 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2642</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2642" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2642" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2642" ref_url="https://www.suse.com/security/cve/CVE-2010-2642" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0045-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0140-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2642/">CVE-2010-2642</cve>
	<bugzilla href="https://bugzilla.suse.com/660555">SUSE bug 660555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/661018">SUSE bug 661018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/662411">SUSE bug 662411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/664484">SUSE bug 664484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/790421">SUSE bug 790421</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482660" comment="evince-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482661" comment="evince-devel-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482662" comment="evince-lang-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482663" comment="evince-plugin-djvudocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482664" comment="evince-plugin-dvidocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482665" comment="evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482666" comment="evince-plugin-psdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482667" comment="evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482668" comment="evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482669" comment="libevdocument3-4-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482670" comment="libevview3-3-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482671" comment="nautilus-evince-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482672" comment="typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482673" comment="typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-2.41 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2643</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2643" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2643" ref_url="https://www.suse.com/security/cve/CVE-2010-2643" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0045-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00019.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2643/">CVE-2010-2643</cve>
	<bugzilla href="https://bugzilla.suse.com/660555">SUSE bug 660555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482660" comment="evince-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482661" comment="evince-devel-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482662" comment="evince-lang-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482663" comment="evince-plugin-djvudocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482664" comment="evince-plugin-dvidocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482665" comment="evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482666" comment="evince-plugin-psdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482667" comment="evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482668" comment="evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482669" comment="libevdocument3-4-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482670" comment="libevview3-3-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482671" comment="nautilus-evince-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482672" comment="typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482673" comment="typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-2.41 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2751</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2751" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2751" ref_url="https://www.suse.com/security/cve/CVE-2010-2751" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
    <description>
    The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a redirect, and the history.back and history.forward JavaScript functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-2751/">CVE-2010-2751</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2752</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2752" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2752" ref_url="https://www.suse.com/security/cve/CVE-2010-2752" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2752/">CVE-2010-2752</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2753</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2753" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2753" ref_url="https://www.suse.com/security/cve/CVE-2010-2753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2753/">CVE-2010-2753</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2754</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2754" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2754" ref_url="https://www.suse.com/security/cve/CVE-2010-2754" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-4" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows remote attackers to obtain sensitive information about script parameters via a crafted HTML document, related to the window.onerror handler.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2754/">CVE-2010-2754</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2755</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2755" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2755" ref_url="https://www.suse.com/security/cve/CVE-2010-2755" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
    <description>
    layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2755/">CVE-2010-2755</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2760</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2760" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2760" ref_url="https://www.suse.com/security/cve/CVE-2010-2760" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via vectors involving a XUL tree selection, related to a "dangling pointer vulnerability." NOTE: this issue exists because of an incomplete fix for CVE-2010-2753.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-17"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2760/">CVE-2010-2760</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2761</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2761" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2761" ref_url="https://www.suse.com/security/cve/CVE-2010-2761" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0020-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0064-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00027.html" source="SUSE-SU"/>
    <description>
    The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2761/">CVE-2010-2761</cve>
	<bugzilla href="https://bugzilla.suse.com/657343">SUSE bug 657343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/657731">SUSE bug 657731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/663396">SUSE bug 663396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/669245">SUSE bug 669245</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/670476">SUSE bug 670476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487781" comment="perl-doc-5.26.1-7.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481617" comment="perl-5.26.1-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481618" comment="perl-base-5.26.1-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481619" comment="perl-base-32bit-5.26.1-7.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2762</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2762" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2762" ref_url="https://www.suse.com/security/cve/CVE-2010-2762" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x before 3.1.3 does not properly restrict objects at the end of scope chains, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via vectors related to a chrome privileged object and a chain ending in an outer object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-06"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2762/">CVE-2010-2762</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2764</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2764" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2764" ref_url="https://www.suse.com/security/cve/CVE-2010-2764" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2764/">CVE-2010-2764</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2765</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2765" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2765" ref_url="https://www.suse.com/security/cve/CVE-2010-2765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a large number of values in the cols (aka columns) attribute, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-18"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2765/">CVE-2010-2765</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2766</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2766" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2766" ref_url="https://www.suse.com/security/cve/CVE-2010-2766" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-17"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2766/">CVE-2010-2766</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2767</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2767" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2767" ref_url="https://www.suse.com/security/cve/CVE-2010-2767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle destruction of the DOM plugin array, which might allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted access to the navigator object, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-18"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2767/">CVE-2010-2767</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2768</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2768" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2768" ref_url="https://www.suse.com/security/cve/CVE-2010-2768" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use of the type attribute of an OBJECT element to set a document's charset, which allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms via UTF-7 encoding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2768/">CVE-2010-2768</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2769</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2769" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2769" ref_url="https://www.suse.com/security/cve/CVE-2010-2769" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in which the designMode property is enabled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2769/">CVE-2010-2769</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2798</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2798" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2798" ref_url="https://www.suse.com/security/cve/CVE-2010-2798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:039" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0592-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-05"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-2798/">CVE-2010-2798</cve>
	<bugzilla href="https://bugzilla.suse.com/627386">SUSE bug 627386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2800</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2800" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2800" ref_url="https://www.suse.com/security/cve/CVE-2010-2800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000908.html" source="SUSE-SU"/>
    <description>
    The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1) test or (2) extract action, related to the libmspack library.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2800/">CVE-2010-2800</cve>
	<bugzilla href="https://bugzilla.suse.com/627753">SUSE bug 627753</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481437" comment="libmspack-devel-0.6-3.3.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481438" comment="libmspack0-0.6-3.3.11 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2801</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2801" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2801" ref_url="https://www.suse.com/security/cve/CVE-2010-2801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000908.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2801/">CVE-2010-2801</cve>
	<bugzilla href="https://bugzilla.suse.com/627753">SUSE bug 627753</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481437" comment="libmspack-devel-0.6-3.3.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481438" comment="libmspack0-0.6-3.3.11 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2803</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2803" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2803" ref_url="https://www.suse.com/security/cve/CVE-2010-2803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2803/">CVE-2010-2803</cve>
	<bugzilla href="https://bugzilla.suse.com/628604">SUSE bug 628604</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2805</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2805" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2805" ref_url="https://www.suse.com/security/cve/CVE-2010-2805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0549-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00060.html" source="SUSE-SU"/>
    <description>
    The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2805/">CVE-2010-2805</cve>
	<bugzilla href="https://bugzilla.suse.com/629447">SUSE bug 629447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/635692">SUSE bug 635692</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102891" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2891</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2891" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2891" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2891" ref_url="https://www.suse.com/security/cve/CVE-2010-2891" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0011-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical string containing many components separated by . (dot) characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2891/">CVE-2010-2891</cve>
	<bugzilla href="https://bugzilla.suse.com/649867">SUSE bug 649867</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486499" comment="libsmi-devel-0.4.8-1.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480716" comment="libsmi-0.4.8-1.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480717" comment="libsmi2-0.4.8-1.29 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2939</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2939" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2939" ref_url="https://www.suse.com/security/cve/CVE-2010-2939" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0951-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0952-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00023.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime. NOTE: some sources refer to this as a use-after-free issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2939/">CVE-2010-2939</cve>
	<bugzilla href="https://bugzilla.suse.com/489641">SUSE bug 489641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2942</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2942" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2942" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2942" ref_url="https://www.suse.com/security/cve/CVE-2010-2942" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-13"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2010-2942/">CVE-2010-2942</cve>
	<bugzilla href="https://bugzilla.suse.com/632309">SUSE bug 632309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/642324">SUSE bug 642324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102943" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2943</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2943" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2943" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2943" ref_url="https://www.suse.com/security/cve/CVE-2010-2943" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2010-2943/">CVE-2010-2943</cve>
	<bugzilla href="https://bugzilla.suse.com/632317">SUSE bug 632317</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2946</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2946" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2946" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2946" ref_url="https://www.suse.com/security/cve/CVE-2010-2946" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    fs/jfs/xattr.c in the Linux kernel before 2.6.35.2 does not properly handle a certain legacy format for storage of extended attributes, which might allow local users by bypass intended xattr namespace restrictions via an "os2." substring at the beginning of a name.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2946/">CVE-2010-2946</cve>
	<bugzilla href="https://bugzilla.suse.com/633585">SUSE bug 633585</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2947</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2947" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2947" ref_url="https://www.suse.com/security/cve/CVE-2010-2947" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0723-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00014.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that is inconsistent with the expected number of fields.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2947/">CVE-2010-2947</cve>
	<bugzilla href="https://bugzilla.suse.com/631582">SUSE bug 631582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480357" comment="libHX-devel-3.22-1.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480358" comment="libHX28-3.22-1.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480359" comment="libHX28-32bit-3.22-1.26 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2954</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2954" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2954" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2954" ref_url="https://www.suse.com/security/cve/CVE-2010-2954" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
    <description>
    The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap function, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via multiple unsuccessful calls to bind on an AF_IRDA (aka PF_IRDA) socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2954/">CVE-2010-2954</cve>
	<bugzilla href="https://bugzilla.suse.com/636112">SUSE bug 636112</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3053</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3053" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3053" ref_url="https://www.suse.com/security/cve/CVE-2010-3053" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00015.html" source="SUSE-SU"/>
    <description>
    bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) via a crafted BDF font file, related to an attempted modification of a value in a static string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3053/">CVE-2010-3053</cve>
	<bugzilla href="https://bugzilla.suse.com/633938">SUSE bug 633938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/635692">SUSE bug 635692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/645982">SUSE bug 645982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3054</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3054" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3054" ref_url="https://www.suse.com/security/cve/CVE-2010-3054" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3054/">CVE-2010-3054</cve>
	<bugzilla href="https://bugzilla.suse.com/633943">SUSE bug 633943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/635692">SUSE bug 635692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/645982">SUSE bug 645982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3066</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3066" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3066" ref_url="https://www.suse.com/security/cve/CVE-2010-3066" source="SUSE CVE"/>
    <description>
    The io_submit_one function in fs/aio.c in the Linux kernel before 2.6.23 allows local users to cause a denial of service (NULL pointer dereference) via a crafted io_submit system call with an IOCB_FLAG_RESFD flag.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3066/">CVE-2010-3066</cve>
	<bugzilla href="https://bugzilla.suse.com/657944">SUSE bug 657944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3067</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3067" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3067" ref_url="https://www.suse.com/security/cve/CVE-2010-3067" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows local users to cause a denial of service or possibly have unspecified other impact via crafted use of the io_submit system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3067/">CVE-2010-3067</cve>
	<bugzilla href="https://bugzilla.suse.com/642302">SUSE bug 642302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3078</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3078" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3078" ref_url="https://www.suse.com/security/cve/CVE-2010-3078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-10"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2010-3078/">CVE-2010-3078</cve>
	<bugzilla href="https://bugzilla.suse.com/637436">SUSE bug 637436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3079</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3079" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3079" ref_url="https://www.suse.com/security/cve/CVE-2010-3079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which allows local users to cause a denial of service (NULL pointer dereference and outage of all function tracing files) via an lseek call on a file descriptor associated with the set_ftrace_filter file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-3079/">CVE-2010-3079</cve>
	<bugzilla href="https://bugzilla.suse.com/637502">SUSE bug 637502</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3080</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3080" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3080" ref_url="https://www.suse.com/security/cve/CVE-2010-3080" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c in the Linux kernel before 2.6.36-rc4 might allow local users to cause a denial of service or possibly have unspecified other impact via an unsuccessful attempt to open the /dev/sequencer device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3080/">CVE-2010-3080</cve>
	<bugzilla href="https://bugzilla.suse.com/638277">SUSE bug 638277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3081</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3081" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3081" ref_url="https://www.suse.com/security/cve/CVE-2010-3081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
    <description>
    The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-3081/">CVE-2010-3081</cve>
	<bugzilla href="https://bugzilla.suse.com/639709">SUSE bug 639709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/641575">SUSE bug 641575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3084</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3084" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3084" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3084" ref_url="https://www.suse.com/security/cve/CVE-2010-3084" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the niu_get_ethtool_tcam_all function in drivers/net/niu.c in the Linux kernel before 2.6.36-rc4 allows local users to cause a denial of service or possibly have unspecified other impact via the ETHTOOL_GRXCLSRLALL ethtool command.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3084/">CVE-2010-3084</cve>
	<bugzilla href="https://bugzilla.suse.com/638274">SUSE bug 638274</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3086</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3086" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3086" ref_url="https://www.suse.com/security/cve/CVE-2010-3086" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
    <description>
    include/asm-x86/futex.h in the Linux kernel before 2.6.25 does not properly implement exception fixup, which allows local users to cause a denial of service (panic) via an invalid application that triggers a page fault.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3086/">CVE-2010-3086</cve>
	<bugzilla href="https://bugzilla.suse.com/652595">SUSE bug 652595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3166</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3166" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3166" ref_url="https://www.suse.com/security/cve/CVE-2010-3166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a bidirectional text run.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3166/">CVE-2010-3166</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3167</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3167" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3167" ref_url="https://www.suse.com/security/cve/CVE-2010-3167" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to execute arbitrary code via vectors involving access to deleted memory, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-18"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3167/">CVE-2010-3167</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3168</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3168" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3168" ref_url="https://www.suse.com/security/cve/CVE-2010-3168" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property changes in triggering XUL tree removal, which allows remote attackers to cause a denial of service (deleted memory access and application crash) or possibly execute arbitrary code by setting unspecified properties.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-19"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3168/">CVE-2010-3168</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3169</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3169" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3169" ref_url="https://www.suse.com/security/cve/CVE-2010-3169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3169/">CVE-2010-3169</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3170</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3170" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3170" ref_url="https://www.suse.com/security/cve/CVE-2010-3170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0904-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3170/">CVE-2010-3170</cve>
	<bugzilla href="https://bugzilla.suse.com/637290">SUSE bug 637290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/868629">SUSE bug 868629</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3173</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3173" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3173" ref_url="https://www.suse.com/security/cve/CVE-2010-3173" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3173/">CVE-2010-3173</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3174</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3174" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3174" ref_url="https://www.suse.com/security/cve/CVE-2010-3174" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.14, Thunderbird before 3.0.9, and SeaMonkey before 2.0.9 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3174/">CVE-2010-3174</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3175</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3175" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3175" ref_url="https://www.suse.com/security/cve/CVE-2010-3175" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-07"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3175/">CVE-2010-3175</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3176</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3176" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3176" ref_url="https://www.suse.com/security/cve/CVE-2010-3176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-08"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3176/">CVE-2010-3176</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3177</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3177" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3177" ref_url="https://www.suse.com/security/cve/CVE-2010-3177" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote attackers to inject arbitrary web script or HTML via a crafted name of a (1) file or (2) directory on a Gopher server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3177/">CVE-2010-3177</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3178</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3178" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3178" ref_url="https://www.suse.com/security/cve/CVE-2010-3178" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly handle certain modal calls made by javascript: URLs in circumstances related to opening a new window and performing cross-domain navigation, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3178/">CVE-2010-3178</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3179</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3179" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3179" ref_url="https://www.suse.com/security/cve/CVE-2010-3179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a long argument to the document.write method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3179/">CVE-2010-3179</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3180</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3180" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3180" ref_url="https://www.suse.com/security/cve/CVE-2010-3180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3180/">CVE-2010-3180</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3182</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3182" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3182" ref_url="https://www.suse.com/security/cve/CVE-2010-3182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3182/">CVE-2010-3182</cve>
	<bugzilla href="https://bugzilla.suse.com/642502">SUSE bug 642502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3183</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3183" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3183" ref_url="https://www.suse.com/security/cve/CVE-2010-3183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.__lookupGetter__ function calls that lack arguments, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via vectors involving a "dangling pointer" and the JS_ValueToId function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3183/">CVE-2010-3183</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3192</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3192" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3192" ref_url="https://www.suse.com/security/cve/CVE-2010-3192" source="SUSE CVE"/>
    <description>
    Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated by a setuid program that contains a stack-based buffer overflow error, related to the __fortify_fail function in debug/fortify_fail.c, and the __stack_chk_fail (aka stack protection) and __chk_fail (aka FORTIFY_SOURCE) implementations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3192/">CVE-2010-3192</cve>
	<bugzilla href="https://bugzilla.suse.com/636113">SUSE bug 636113</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3296</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3296" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3296" ref_url="https://www.suse.com/security/cve/CVE-2010-3296" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
    <description>
    The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3296/">CVE-2010-3296</cve>
	<bugzilla href="https://bugzilla.suse.com/639481">SUSE bug 639481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/649187">SUSE bug 649187</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3297</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3297" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3297" ref_url="https://www.suse.com/security/cve/CVE-2010-3297" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
    <description>
    The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQL_GETMASTRCFG ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3297/">CVE-2010-3297</cve>
	<bugzilla href="https://bugzilla.suse.com/639482">SUSE bug 639482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/649187">SUSE bug 649187</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3298</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3298" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3298" ref_url="https://www.suse.com/security/cve/CVE-2010-3298" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
    <description>
    The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3298/">CVE-2010-3298</cve>
	<bugzilla href="https://bugzilla.suse.com/639483">SUSE bug 639483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/649187">SUSE bug 649187</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3301</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3301" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3301" ref_url="https://www.suse.com/security/cve/CVE-2010-3301" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
    <description>
    The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-bounds access to the system call table using the %rax register. NOTE: this vulnerability exists because of a CVE-2007-4573 regression.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3301/">CVE-2010-3301</cve>
	<bugzilla href="https://bugzilla.suse.com/639708">SUSE bug 639708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3311</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3311" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3311" ref_url="https://www.suse.com/security/cve/CVE-2010-3311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00015.html" source="SUSE-SU"/>
    <description>
    Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an "input stream position error" issue, a different vulnerability than CVE-2010-1797.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3311/">CVE-2010-3311</cve>
	<bugzilla href="https://bugzilla.suse.com/635692">SUSE bug 635692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/641580">SUSE bug 641580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/645982">SUSE bug 645982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103315" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3315</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3315" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3315" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3315" ref_url="https://www.suse.com/security/cve/CVE-2010-3315" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1042-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1869-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00055.html" source="SUSE-SU"/>
    <description>
    authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3315/">CVE-2010-3315</cve>
	<bugzilla href="https://bugzilla.suse.com/649861">SUSE bug 649861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3430</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3430" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3430" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3430" ref_url="https://www.suse.com/security/cve/CVE-2010-3430" source="SUSE CVE"/>
    <description>
    The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not perform the required setfsgid and setgroups system calls, which might allow local users to obtain sensitive information by leveraging unintended group permissions, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-3435.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3430/">CVE-2010-3430</cve>
	<bugzilla href="https://bugzilla.suse.com/623457">SUSE bug 623457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/631802">SUSE bug 631802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487778" comment="pam-devel-32bit-1.3.0-6.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481612" comment="pam-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481613" comment="pam-32bit-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481614" comment="pam-devel-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481615" comment="pam-doc-1.3.0-6.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3431</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3431" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3431" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3431" ref_url="https://www.suse.com/security/cve/CVE-2010-3431" source="SUSE CVE"/>
    <description>
    The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not check the return value of the setfsuid system call, which might allow local users to obtain sensitive information by leveraging an unintended uid, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-3435.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3431/">CVE-2010-3431</cve>
	<bugzilla href="https://bugzilla.suse.com/623457">SUSE bug 623457</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487778" comment="pam-devel-32bit-1.3.0-6.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481612" comment="pam-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481613" comment="pam-32bit-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481614" comment="pam-devel-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481615" comment="pam-doc-1.3.0-6.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3432</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3432" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3432" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3432" ref_url="https://www.suse.com/security/cve/CVE-2010-3432" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3432/">CVE-2010-3432</cve>
	<bugzilla href="https://bugzilla.suse.com/641983">SUSE bug 641983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3437</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3437" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3437" ref_url="https://www.suse.com/security/cve/CVE-2010-3437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and system crash) via a crafted index value in a PKT_CTRL_CMD_STATUS ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3437/">CVE-2010-3437</cve>
	<bugzilla href="https://bugzilla.suse.com/642486">SUSE bug 642486</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3442</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3442" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3442" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3442" ref_url="https://www.suse.com/security/cve/CVE-2010-3442" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the snd_ctl_new function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) SNDRV_CTL_IOCTL_ELEM_ADD or (2) SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3442/">CVE-2010-3442</cve>
	<bugzilla href="https://bugzilla.suse.com/642484">SUSE bug 642484</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3448</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3448" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3448" ref_url="https://www.suse.com/security/cve/CVE-2010-3448" source="SUSE CVE"/>
    <description>
    drivers/platform/x86/thinkpad_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not properly restrict access to the video output control state, which allows local users to cause a denial of service (system hang) via a (1) read or (2) write operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3448/">CVE-2010-3448</cve>
	<bugzilla href="https://bugzilla.suse.com/662671">SUSE bug 662671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103609" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3609</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3609" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3609" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3609" ref_url="https://www.suse.com/security/cve/CVE-2010-3609" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2010:0992-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00039.html" source="SUSE-SU"/>
    <description>
    The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service (infinite loop) via a packet with a "next extension offset" that references this extension or a previous extension.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3609/">CVE-2010-3609</cve>
	<bugzilla href="https://bugzilla.suse.com/642571">SUSE bug 642571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488405" comment="openslp-server-2.0.0-6.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481604" comment="openslp-2.0.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481605" comment="openslp-32bit-2.0.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481606" comment="openslp-devel-2.0.0-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3611</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3611" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3611" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3611" ref_url="https://www.suse.com/security/cve/CVE-2010-3611" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-test-2010:36899-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00006.html" source="SUSE-SU"/>
    <description>
    ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3611/">CVE-2010-3611</cve>
	<bugzilla href="https://bugzilla.suse.com/650902">SUSE bug 650902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/667655">SUSE bug 667655</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3613</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3613" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3613" ref_url="https://www.suse.com/security/cve/CVE-2010-3613" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2010:1031-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00018.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3613/">CVE-2010-3613</cve>
	<bugzilla href="https://bugzilla.suse.com/657129">SUSE bug 657129</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103614" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3614</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3614" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3614" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3614" ref_url="https://www.suse.com/security/cve/CVE-2010-3614" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2010:1031-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00018.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3614/">CVE-2010-3614</cve>
	<bugzilla href="https://bugzilla.suse.com/657102">SUSE bug 657102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3615</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3615" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3615" ref_url="https://www.suse.com/security/cve/CVE-2010-3615" source="SUSE CVE"/>
    <description>
    named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3615/">CVE-2010-3615</cve>
	<bugzilla href="https://bugzilla.suse.com/657120">SUSE bug 657120</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3616</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3616" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3616" ref_url="https://www.suse.com/security/cve/CVE-2010-3616" source="SUSE CVE"/>
    <description>
    ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss) by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios check_tcp process check to TCP port 520.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3616/">CVE-2010-3616</cve>
	<bugzilla href="https://bugzilla.suse.com/659059">SUSE bug 659059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3698</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3698" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3698" ref_url="https://www.suse.com/security/cve/CVE-2010-3698" source="SUSE CVE"/>
    <description>
    The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, which allows host OS users to cause a denial of service (host OS crash) via a KVM_RUN ioctl call in conjunction with a modified Local Descriptor Table (LDT).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3698/">CVE-2010-3698</cve>
	<bugzilla href="https://bugzilla.suse.com/1161450">SUSE bug 1161450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3705</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3705" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3705" ref_url="https://www.suse.com/security/cve/CVE-2010-3705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel before 2.6.36 does not properly validate the hmac_ids array of an SCTP peer, which allows remote attackers to cause a denial of service (memory corruption and panic) via a crafted value in the last element of this array.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3705/">CVE-2010-3705</cve>
	<bugzilla href="https://bugzilla.suse.com/643513">SUSE bug 643513</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3711</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3711" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3711" ref_url="https://www.suse.com/security/cve/CVE-2010-3711" source="SUSE CVE"/>
    <description>
    libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3711/">CVE-2010-3711</cve>
	<bugzilla href="https://bugzilla.suse.com/648273">SUSE bug 648273</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3765</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3765" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3765" ref_url="https://www.suse.com/security/cve/CVE-2010-3765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-31"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3765/">CVE-2010-3765</cve>
	<bugzilla href="https://bugzilla.suse.com/649492">SUSE bug 649492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3768</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3768" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3768" ref_url="https://www.suse.com/security/cve/CVE-2010-3768" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not properly validate downloadable fonts before use within an operating system's font implementation, which allows remote attackers to execute arbitrary code via vectors related to @font-face Cascading Style Sheets (CSS) rules.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3768/">CVE-2010-3768</cve>
	<bugzilla href="https://bugzilla.suse.com/657016">SUSE bug 657016</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3769</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3769" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3769" ref_url="https://www.suse.com/security/cve/CVE-2010-3769" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3769/">CVE-2010-3769</cve>
	<bugzilla href="https://bugzilla.suse.com/657016">SUSE bug 657016</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3776</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3776" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3776" ref_url="https://www.suse.com/security/cve/CVE-2010-3776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3776/">CVE-2010-3776</cve>
	<bugzilla href="https://bugzilla.suse.com/657016">SUSE bug 657016</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3777</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3777" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3777" ref_url="https://www.suse.com/security/cve/CVE-2010-3777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Mozilla Firefox 3.6.x before 3.6.13 and Thunderbird 3.1.x before 3.1.7 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3777/">CVE-2010-3777</cve>
	<bugzilla href="https://bugzilla.suse.com/657016">SUSE bug 657016</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3778</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3778" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3778" ref_url="https://www.suse.com/security/cve/CVE-2010-3778" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Mozilla Firefox 3.5.x before 3.5.16, Thunderbird before 3.0.11, and SeaMonkey before 2.0.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3778/">CVE-2010-3778</cve>
	<bugzilla href="https://bugzilla.suse.com/657016">SUSE bug 657016</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3814</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3814" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3814" ref_url="https://www.suse.com/security/cve/CVE-2010-3814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0361-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00057.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document with a crafted embedded font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3814/">CVE-2010-3814</cve>
	<bugzilla href="https://bugzilla.suse.com/647375">SUSE bug 647375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/689174">SUSE bug 689174</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3848</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3848" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3848" ref_url="https://www.suse.com/security/cve/CVE-2010-3848" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3848/">CVE-2010-3848</cve>
	<bugzilla href="https://bugzilla.suse.com/647632">SUSE bug 647632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103849" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3849</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3849" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3849" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3849" ref_url="https://www.suse.com/security/cve/CVE-2010-3849" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3849/">CVE-2010-3849</cve>
	<bugzilla href="https://bugzilla.suse.com/647632">SUSE bug 647632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3850</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3850" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3850" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3850" ref_url="https://www.suse.com/security/cve/CVE-2010-3850" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-24"/>
	<updated date="2023-02-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3850/">CVE-2010-3850</cve>
	<bugzilla href="https://bugzilla.suse.com/647632">SUSE bug 647632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/658461">SUSE bug 658461</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3853</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3853" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3853" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3853" ref_url="https://www.suse.com/security/cve/CVE-2010-3853" source="SUSE CVE"/>
    <description>
    pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as demonstrated by the sudo program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3853/">CVE-2010-3853</cve>
	<bugzilla href="https://bugzilla.suse.com/647958">SUSE bug 647958</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487778" comment="pam-devel-32bit-1.3.0-6.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481612" comment="pam-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481613" comment="pam-32bit-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481614" comment="pam-devel-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481615" comment="pam-doc-1.3.0-6.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3855</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3855" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3855" ref_url="https://www.suse.com/security/cve/CVE-2010-3855" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0361-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00057.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3855/">CVE-2010-3855</cve>
	<bugzilla href="https://bugzilla.suse.com/647375">SUSE bug 647375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/689174">SUSE bug 689174</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3858</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3858" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3858" ref_url="https://www.suse.com/security/cve/CVE-2010-3858" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
    <description>
    The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the stack memory consumption of the (1) arguments and (2) environment for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of service (system crash) via a crafted exec system call, a related issue to CVE-2010-2240.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3858/">CVE-2010-3858</cve>
	<bugzilla href="https://bugzilla.suse.com/648302">SUSE bug 648302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/655220">SUSE bug 655220</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3861</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3861" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3861" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3861" ref_url="https://www.suse.com/security/cve/CVE-2010-3861" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local users to obtain potentially sensitive information via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value, a different vulnerability than CVE-2010-2478.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3861/">CVE-2010-3861</cve>
	<bugzilla href="https://bugzilla.suse.com/649187">SUSE bug 649187</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3864</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3864" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3864" ref_url="https://www.suse.com/security/cve/CVE-2010-3864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7022077" ref_url="https://www.suse.com/support/kb/doc/?id=7022077" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0965-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00030.html" source="SUSE-SU"/>
    <description>
    Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3864/">CVE-2010-3864</cve>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/651003">SUSE bug 651003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488296" comment="stunnel-5.44-1.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103865" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3865</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3865" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3865" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3865" ref_url="https://www.suse.com/security/cve/CVE-2010-3865" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:057" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted iovec struct in a Reliable Datagram Sockets (RDS) request, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3865/">CVE-2010-3865</cve>
	<bugzilla href="https://bugzilla.suse.com/650128">SUSE bug 650128</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103873" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3873</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3873" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3873" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3873" ref_url="https://www.suse.com/security/cve/CVE-2010-3873" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denial of service (heap memory corruption and panic) or possibly have unspecified other impact via malformed (1) X25_FAC_CALLING_AE or (2) X25_FAC_CALLED_AE data, related to net/x25/x25_facilities.c and net/x25/x25_in.c, a different vulnerability than CVE-2010-4164.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3873/">CVE-2010-3873</cve>
	<bugzilla href="https://bugzilla.suse.com/651219">SUSE bug 651219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/653260">SUSE bug 653260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103874" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3874</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3874" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3874" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3874" ref_url="https://www.suse.com/security/cve/CVE-2010-3874" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service (memory corruption) via a connect operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3874/">CVE-2010-3874</cve>
	<bugzilla href="https://bugzilla.suse.com/651218">SUSE bug 651218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3875</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3875" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3875" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3875" ref_url="https://www.suse.com/security/cve/CVE-2010-3875" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The ax25_getname function in net/ax25/af_ax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-19"/>
	<updated date="2023-02-19"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3875/">CVE-2010-3875</cve>
	<bugzilla href="https://bugzilla.suse.com/650897">SUSE bug 650897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103876" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3876</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3876" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3876" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3876" ref_url="https://www.suse.com/security/cve/CVE-2010-3876" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    net/packet/af_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_RAW capability to read copies of the applicable structures.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3876/">CVE-2010-3876</cve>
	<bugzilla href="https://bugzilla.suse.com/650897">SUSE bug 650897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103877" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3877</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3877" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3877" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3877" ref_url="https://www.suse.com/security/cve/CVE-2010-3877" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The get_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-24"/>
	<updated date="2023-02-24"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3877/">CVE-2010-3877</cve>
	<bugzilla href="https://bugzilla.suse.com/650897">SUSE bug 650897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103880" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3880</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3880" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3880" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3880" ref_url="https://www.suse.com/security/cve/CVE-2010-3880" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    net/ipv4/inet_diag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message that contains multiple attribute elements, as demonstrated by INET_DIAG_BC_JMP instructions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3880/">CVE-2010-3880</cve>
	<bugzilla href="https://bugzilla.suse.com/651599">SUSE bug 651599</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3881</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3881" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3881" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3881" ref_url="https://www.suse.com/security/cve/CVE-2010-3881" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-03-01"/>
	<updated date="2023-03-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3881/">CVE-2010-3881</cve>
	<bugzilla href="https://bugzilla.suse.com/651596">SUSE bug 651596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/662663">SUSE bug 662663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/706696">SUSE bug 706696</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3904</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3904" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3904" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3904" ref_url="https://www.suse.com/security/cve/CVE-2010-3904" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:057" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-19"/>
	<updated date="2023-05-19"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3904/">CVE-2010-3904</cve>
	<bugzilla href="https://bugzilla.suse.com/647392">SUSE bug 647392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/676707">SUSE bug 676707</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/703752">SUSE bug 703752</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4000</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4000" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4000" ref_url="https://www.suse.com/security/cve/CVE-2010-4000" source="SUSE CVE"/>
    <description>
    gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4000/">CVE-2010-4000</cve>
	<bugzilla href="https://bugzilla.suse.com/642827">SUSE bug 642827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489064" comment="gnome-shell-calendar-3.26.2+20180130.0d9c74212-4.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486612" comment="gnome-shell-3.26.2+20180130.0d9c74212-4.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486613" comment="gnome-shell-devel-3.26.2+20180130.0d9c74212-4.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486614" comment="gnome-shell-lang-3.26.2+20180130.0d9c74212-4.16.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4008</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4008" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4008" ref_url="https://www.suse.com/security/cve/CVE-2010-4008" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1004-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00001.html" source="SUSE-SU"/>
    <description>
    libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4008/">CVE-2010-4008</cve>
	<bugzilla href="https://bugzilla.suse.com/648277">SUSE bug 648277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334490" comment="libxml2 is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4078</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4078" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4078" ref_url="https://www.suse.com/security/cve/CVE-2010-4078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-26"/>
	<updated date="2023-05-26"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4078/">CVE-2010-4078</cve>
	<bugzilla href="https://bugzilla.suse.com/642311">SUSE bug 642311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4080</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4080" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4080" ref_url="https://www.suse.com/security/cve/CVE-2010-4080" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSP_IOCTL_GET_CONFIG_INFO ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-26"/>
	<updated date="2023-05-26"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4080/">CVE-2010-4080</cve>
	<bugzilla href="https://bugzilla.suse.com/642312">SUSE bug 642312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4081</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4081" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4081" ref_url="https://www.suse.com/security/cve/CVE-2010-4081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSPM_IOCTL_GET_CONFIG_INFO ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-21"/>
	<updated date="2023-05-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4081/">CVE-2010-4081</cve>
	<bugzilla href="https://bugzilla.suse.com/642312">SUSE bug 642312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4158</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4158" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4158" ref_url="https://www.suse.com/security/cve/CVE-2010-4158" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensitive information from kernel stack memory via a crafted socket filter.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4158/">CVE-2010-4158</cve>
	<bugzilla href="https://bugzilla.suse.com/652563">SUSE bug 652563</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4160</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4160" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4160" ref_url="https://www.suse.com/security/cve/CVE-2010-4160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (heap memory corruption and panic) or possibly gain privileges via a crafted sendto call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-02-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4160/">CVE-2010-4160</cve>
	<bugzilla href="https://bugzilla.suse.com/652939">SUSE bug 652939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4162</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4162" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4162" ref_url="https://www.suse.com/security/cve/CVE-2010-4162" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (system crash) via a crafted device ioctl to a SCSI device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4162/">CVE-2010-4162</cve>
	<bugzilla href="https://bugzilla.suse.com/652945">SUSE bug 652945</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4163</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4163" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4163" ref_url="https://www.suse.com/security/cve/CVE-2010-4163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4163/">CVE-2010-4163</cve>
	<bugzilla href="https://bugzilla.suse.com/652945">SUSE bug 652945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/662202">SUSE bug 662202</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4165</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4165" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4165" ref_url="https://www.suse.com/security/cve/CVE-2010-4165" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a denial of service (OOPS) via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect use of a signed integer.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4165/">CVE-2010-4165</cve>
	<bugzilla href="https://bugzilla.suse.com/653258">SUSE bug 653258</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4169</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4169" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4169" ref_url="https://www.suse.com/security/cve/CVE-2010-4169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an mprotect system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4169/">CVE-2010-4169</cve>
	<bugzilla href="https://bugzilla.suse.com/653930">SUSE bug 653930</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4226</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4226" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4226" ref_url="https://www.suse.com/security/cve/CVE-2010-4226" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3253-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0174-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00025.html" source="SUSE-SU"/>
    <description>
    cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4226/">CVE-2010-4226</cve>
	<bugzilla href="https://bugzilla.suse.com/665768">SUSE bug 665768</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341619" comment="build is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341619" comment="build is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684941" comment="build-mkbaselibs is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487736" comment="build-20190128-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487737" comment="build-mkbaselibs-20190128-3.3.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4242</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4242" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4242" ref_url="https://www.suse.com/security/cve/CVE-2010-4242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service (NULL pointer dereference) via vectors related to the Bluetooth driver.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4242/">CVE-2010-4242</cve>
	<bugzilla href="https://bugzilla.suse.com/655451">SUSE bug 655451</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4243</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4243" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4243" ref_url="https://www.suse.com/security/cve/CVE-2010-4243" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an "OOM dodging issue," a related issue to CVE-2010-3858.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-02-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4243/">CVE-2010-4243</cve>
	<bugzilla href="https://bugzilla.suse.com/655220">SUSE bug 655220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746947">SUSE bug 746947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4248</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4248" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4248" ref_url="https://www.suse.com/security/cve/CVE-2010-4248" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    Race condition in the __exit_signal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader in the de_thread function in fs/exec.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-02-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4248/">CVE-2010-4248</cve>
	<bugzilla href="https://bugzilla.suse.com/655468">SUSE bug 655468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4249</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4249" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4249" ref_url="https://www.suse.com/security/cve/CVE-2010-4249" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properly select times for garbage collection of inflight sockets, which allows local users to cause a denial of service (system hang) via crafted use of the socketpair and sendmsg system calls for SOCK_SEQPACKET sockets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4249/">CVE-2010-4249</cve>
	<bugzilla href="https://bugzilla.suse.com/655696">SUSE bug 655696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/656153">SUSE bug 656153</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4250</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4250" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4250" ref_url="https://www.suse.com/security/cve/CVE-2010-4250" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory consumption) via vectors involving failed attempts to create files.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4250/">CVE-2010-4250</cve>
	<bugzilla href="https://bugzilla.suse.com/655693">SUSE bug 655693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4251</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4251" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4251" ref_url="https://www.suse.com/security/cve/CVE-2010-4251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The socket implementation in net/core/sock.c in the Linux kernel before 2.6.34 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service (memory consumption) by sending a large amount of network traffic, as demonstrated by netperf UDP tests.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-20"/>
	<updated date="2023-02-20"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-4251/">CVE-2010-4251</cve>
	<bugzilla href="https://bugzilla.suse.com/643138">SUSE bug 643138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/655973">SUSE bug 655973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826455">SUSE bug 826455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4256</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4256" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4256" ref_url="https://www.suse.com/security/cve/CVE-2010-4256" source="SUSE CVE"/>
    <description>
    The pipe_fcntl function in fs/pipe.c in the Linux kernel before 2.6.37 does not properly determine whether a file is a named pipe, which allows local users to cause a denial of service via an F_SETPIPE_SZ fcntl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4256/">CVE-2010-4256</cve>
	<bugzilla href="https://bugzilla.suse.com/656483">SUSE bug 656483</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4258</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4258" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4258" ref_url="https://www.suse.com/security/cve/CVE-2010-4258" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a (1) BUG, (2) NULL pointer dereference, or (3) page fault, as demonstrated by vectors involving the clear_child_tid feature and the splice system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4258/">CVE-2010-4258</cve>
	<bugzilla href="https://bugzilla.suse.com/657350">SUSE bug 657350</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4263</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4263" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4263" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4263" ref_url="https://www.suse.com/security/cve/CVE-2010-4263" source="SUSE CVE"/>
    <description>
    The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Linux kernel before 2.6.34, when Single Root I/O Virtualization (SR-IOV) and promiscuous mode are enabled but no VLANs are registered, allows remote attackers to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via a VLAN tagged frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4263/">CVE-2010-4263</cve>
	<bugzilla href="https://bugzilla.suse.com/657716">SUSE bug 657716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104341" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4341</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4341" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4341" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4341" ref_url="https://www.suse.com/security/cve/CVE-2010-4341" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0058-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00025.html" source="SUSE-SU"/>
    <description>
    The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4341/">CVE-2010-4341</cve>
	<bugzilla href="https://bugzilla.suse.com/660481">SUSE bug 660481</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481381" comment="libipa_hbac-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481382" comment="libipa_hbac0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481383" comment="libsss_certmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481384" comment="libsss_certmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481385" comment="libsss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481386" comment="libsss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481387" comment="libsss_nss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481388" comment="libsss_nss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481389" comment="libsss_simpleifp-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481390" comment="libsss_simpleifp0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481391" comment="python3-sssd-config-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481392" comment="sssd-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481393" comment="sssd-32bit-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481394" comment="sssd-ad-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481395" comment="sssd-dbus-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481396" comment="sssd-ipa-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481397" comment="sssd-krb5-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481398" comment="sssd-krb5-common-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481399" comment="sssd-ldap-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481400" comment="sssd-proxy-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481401" comment="sssd-tools-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481402" comment="sssd-wbclient-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481403" comment="sssd-wbclient-devel-1.16.1-3.18.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4342</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4342" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4342" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4342" ref_url="https://www.suse.com/security/cve/CVE-2010-4342" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The aun_incoming function in net/econet/af_econet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending an Acorn Universal Networking (AUN) packet over UDP.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4342/">CVE-2010-4342</cve>
	<bugzilla href="https://bugzilla.suse.com/658461">SUSE bug 658461</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4343</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4343" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4343" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4343" ref_url="https://www.suse.com/security/cve/CVE-2010-4343" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to cause a denial of service (system crash) via read operations on an fc_host statistics file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-4343/">CVE-2010-4343</cve>
	<bugzilla href="https://bugzilla.suse.com/658178">SUSE bug 658178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4346</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4346" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4346" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4346" ref_url="https://www.suse.com/security/cve/CVE-2010-4346" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4346/">CVE-2010-4346</cve>
	<bugzilla href="https://bugzilla.suse.com/658720">SUSE bug 658720</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4347</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4347" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4347" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4347" ref_url="https://www.suse.com/security/cve/CVE-2010-4347" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4347/">CVE-2010-4347</cve>
	<bugzilla href="https://bugzilla.suse.com/659076">SUSE bug 659076</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4410</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4410" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4410" ref_url="https://www.suse.com/security/cve/CVE-2010-4410" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0083-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00032.html" source="SUSE-SU"/>
    <description>
    CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4410/">CVE-2010-4410</cve>
	<bugzilla href="https://bugzilla.suse.com/657343">SUSE bug 657343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/660127">SUSE bug 660127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/663396">SUSE bug 663396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/670476">SUSE bug 670476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487781" comment="perl-doc-5.26.1-7.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481617" comment="perl-5.26.1-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481618" comment="perl-base-5.26.1-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481619" comment="perl-base-32bit-5.26.1-7.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4411</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4411" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4411" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4411" ref_url="https://www.suse.com/security/cve/CVE-2010-4411" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0083-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2010-2761.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4411/">CVE-2010-4411</cve>
	<bugzilla href="https://bugzilla.suse.com/657343">SUSE bug 657343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/657731">SUSE bug 657731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/663396">SUSE bug 663396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/669245">SUSE bug 669245</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/670476">SUSE bug 670476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487781" comment="perl-doc-5.26.1-7.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481617" comment="perl-5.26.1-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481618" comment="perl-base-5.26.1-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481619" comment="perl-base-32bit-5.26.1-7.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4494</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4494" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4494" ref_url="https://www.suse.com/security/cve/CVE-2010-4494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00036.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4494/">CVE-2010-4494</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/661471">SUSE bug 661471</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334490" comment="libxml2 is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4527</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4527" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4527" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4527" ref_url="https://www.suse.com/security/cve/CVE-2010-4527" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    The load_mixer_volumes function in sound/oss/soundcard.c in the OSS sound subsystem in the Linux kernel before 2.6.37 incorrectly expects that a certain name field ends with a '\0' character, which allows local users to conduct buffer overflow attacks and gain privileges, or possibly obtain sensitive information from kernel memory, via a SOUND_MIXER_SETLEVELS ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4527/">CVE-2010-4527</cve>
	<bugzilla href="https://bugzilla.suse.com/661945">SUSE bug 661945</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4539</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4539" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4539" ref_url="https://www.suse.com/security/cve/CVE-2010-4539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0136-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1869-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00055.html" source="SUSE-SU"/>
    <description>
    The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4539/">CVE-2010-4539</cve>
	<bugzilla href="https://bugzilla.suse.com/662030">SUSE bug 662030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4540</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4540" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4540" ref_url="https://www.suse.com/security/cve/CVE-2010-4540" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS &gt; LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Position field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4540/">CVE-2010-4540</cve>
	<bugzilla href="https://bugzilla.suse.com/662043">SUSE bug 662043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488900" comment="gimp-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488901" comment="gimp-devel-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488902" comment="gimp-lang-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488903" comment="gimp-plugins-python-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488904" comment="libgimp-2_0-0-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488905" comment="libgimpui-2_0-0-2.8.22-3.42 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4541</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4541" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4541" ref_url="https://www.suse.com/security/cve/CVE-2010-4541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lights" field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4541/">CVE-2010-4541</cve>
	<bugzilla href="https://bugzilla.suse.com/662043">SUSE bug 662043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488900" comment="gimp-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488901" comment="gimp-devel-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488902" comment="gimp-lang-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488903" comment="gimp-plugins-python-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488904" comment="libgimp-2_0-0-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488905" comment="libgimpui-2_0-0-2.8.22-3.42 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4542</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4542" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4542" ref_url="https://www.suse.com/security/cve/CVE-2010-4542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Foreground field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4542/">CVE-2010-4542</cve>
	<bugzilla href="https://bugzilla.suse.com/662043">SUSE bug 662043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488900" comment="gimp-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488901" comment="gimp-devel-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488902" comment="gimp-lang-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488903" comment="gimp-plugins-python-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488904" comment="libgimp-2_0-0-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488905" comment="libgimpui-2_0-0-2.8.22-3.42 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4543</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4543" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4543" ref_url="https://www.suse.com/security/cve/CVE-2010-4543" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-18"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4543/">CVE-2010-4543</cve>
	<bugzilla href="https://bugzilla.suse.com/662043">SUSE bug 662043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/692877">SUSE bug 692877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488900" comment="gimp-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488901" comment="gimp-devel-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488902" comment="gimp-lang-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488903" comment="gimp-plugins-python-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488904" comment="libgimp-2_0-0-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488905" comment="libgimpui-2_0-0-2.8.22-3.42 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4565</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4565" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4565" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4565" ref_url="https://www.suse.com/security/cve/CVE-2010-4565" source="SUSE CVE"/>
    <description>
    The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensitive information about kernel memory use by listing this filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4565/">CVE-2010-4565</cve>
	<bugzilla href="https://bugzilla.suse.com/1161355">SUSE bug 1161355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/651218">SUSE bug 651218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4644</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4644" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4644" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4644" ref_url="https://www.suse.com/security/cve/CVE-2010-4644" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0136-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1869-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00055.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4644/">CVE-2010-4644</cve>
	<bugzilla href="https://bugzilla.suse.com/662030">SUSE bug 662030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4648</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4648" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4648" ref_url="https://www.suse.com/security/cve/CVE-2010-4648" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    The orinoco_ioctl_set_auth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not properly implement a TKIP protection mechanism, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading Wi-Fi frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4648/">CVE-2010-4648</cve>
	<bugzilla href="https://bugzilla.suse.com/662951">SUSE bug 662951</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4649</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4649" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4649" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4649" ref_url="https://www.suse.com/security/cve/CVE-2010-4649" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large value of a certain structure member.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4649/">CVE-2010-4649</cve>
	<bugzilla href="https://bugzilla.suse.com/662953">SUSE bug 662953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690537">SUSE bug 690537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4651</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4651" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4651" ref_url="https://www.suse.com/security/cve/CVE-2010-4651" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00005.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4651/">CVE-2010-4651</cve>
	<bugzilla href="https://bugzilla.suse.com/1093615">SUSE bug 1093615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101128">SUSE bug 1101128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/662957">SUSE bug 662957</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481616" comment="patch-2.7.6-3.5 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4665</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4665" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4665" ref_url="https://www.suse.com/security/cve/CVE-2010-4665" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0409-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00079.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with many directory entries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4665/">CVE-2010-4665</cve>
	<bugzilla href="https://bugzilla.suse.com/687442">SUSE bug 687442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4777</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4777" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4777" ref_url="https://www.suse.com/security/cve/CVE-2010-4777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0479-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00025.html" source="SUSE-SU"/>
    <description>
    The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4777/">CVE-2010-4777</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487781" comment="perl-doc-5.26.1-7.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481617" comment="perl-5.26.1-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481618" comment="perl-base-5.26.1-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481619" comment="perl-base-32bit-5.26.1-7.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4805</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4805" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4805" ref_url="https://www.suse.com/security/cve/CVE-2010-4805" source="SUSE CVE"/>
    <description>
    The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the sk_add_backlog function and the sk_rmem_alloc socket field.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4251.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-4805/">CVE-2010-4805</cve>
	<bugzilla href="https://bugzilla.suse.com/698190">SUSE bug 698190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5107</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5107" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5107" ref_url="https://www.suse.com/security/cve/CVE-2010-5107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000579.html" source="SUSE-SU"/>
    <description>
    The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-5107/">CVE-2010-5107</cve>
	<bugzilla href="https://bugzilla.suse.com/1074631">SUSE bug 1074631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802639">SUSE bug 802639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841638">SUSE bug 841638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/858359">SUSE bug 858359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880259">SUSE bug 880259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/881234">SUSE bug 881234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996040">SUSE bug 996040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5298</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5298" ref_url="https://www.suse.com/security/cve/CVE-2010-5298" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0743-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0592-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00003.html" source="SUSE-SU"/>
    <description>
    Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-5298/">CVE-2010-5298</cve>
	<bugzilla href="https://bugzilla.suse.com/873351">SUSE bug 873351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880891">SUSE bug 880891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883126">SUSE bug 883126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885777">SUSE bug 885777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915913">SUSE bug 915913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5313</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5313" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5313" ref_url="https://www.suse.com/security/cve/CVE-2010-5313" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
    <description>
    Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of service (L1 guest OS crash) via a crafted instruction that triggers an L2 emulation failure report, a similar issue to CVE-2014-7842.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-5313/">CVE-2010-5313</cve>
	<bugzilla href="https://bugzilla.suse.com/905312">SUSE bug 905312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/907822">SUSE bug 907822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5321</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5321" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5321" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5321" ref_url="https://www.suse.com/security/cve/CVE-2010-5321" source="SUSE CVE"/>
    <description>
    Memory leak in drivers/media/video/videobuf-core.c in the videobuf subsystem in the Linux kernel 2.6.x through 4.x allows local users to cause a denial of service (memory consumption) by leveraging /dev/video access for a series of mmap calls that require new allocations, a different vulnerability than CVE-2007-6761. NOTE: as of 2016-06-18, this affects only 11 drivers that have not been updated to use videobuf2 instead of videobuf.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-5321/">CVE-2010-5321</cve>
	<bugzilla href="https://bugzilla.suse.com/1035720">SUSE bug 1035720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916831">SUSE bug 916831</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105331" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5331</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5331" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5331" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5331" ref_url="https://www.suse.com/security/cve/CVE-2010-5331" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** In the Linux kernel before 2.6.34, a range check issue in drivers/gpu/drm/radeon/atombios.c could cause an off by one (buffer overflow) problem. NOTE: At least one Linux maintainer believes that this CVE is incorrectly assigned and should be rejected because the value is hard coded and are not user-controllable where it is used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-5331/">CVE-2010-5331</cve>
	<bugzilla href="https://bugzilla.suse.com/1143173">SUSE bug 1143173</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5332</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5332" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5332" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5332" ref_url="https://www.suse.com/security/cve/CVE-2010-5332" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 2.6.37, an out of bounds array access happened in drivers/net/mlx4/port.c. When searching for a free entry in either mlx4_register_vlan() or mlx4_register_mac(), and there is no free entry, the loop terminates without updating the local variable free thus causing out of array bounds access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-08-05"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2010-5332/">CVE-2010-5332</cve>
	<bugzilla href="https://bugzilla.suse.com/1143170">SUSE bug 1143170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0010</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0010" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0010" ref_url="https://www.suse.com/security/cve/CVE-2011-0010" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0050-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00022.html" source="SUSE-SU"/>
    <description>
    check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0010/">CVE-2011-0010</cve>
	<bugzilla href="https://bugzilla.suse.com/663881">SUSE bug 663881</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659701" comment="sudo-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481659" comment="sudo-1.8.22-4.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481660" comment="sudo-devel-1.8.22-4.3.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110014" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0014</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0014" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0014" ref_url="https://www.suse.com/security/cve/CVE-2011-0014" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-403" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00022.html" source="SUSE-SU"/>
    <description>
    ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0014/">CVE-2011-0014</cve>
	<bugzilla href="https://bugzilla.suse.com/670526">SUSE bug 670526</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0020</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0020" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0020" ref_url="https://www.suse.com/security/cve/CVE-2011-0020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00019.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0020/">CVE-2011-0020</cve>
	<bugzilla href="https://bugzilla.suse.com/666101">SUSE bug 666101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486882" comment="libpango-1_0-0-32bit-1.40.14-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481461" comment="libpango-1_0-0-1.40.14-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481462" comment="pango-devel-1.40.14-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481463" comment="typelib-1_0-Pango-1_0-1.40.14-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0053</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0053" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0053" ref_url="https://www.suse.com/security/cve/CVE-2011-0053" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0169-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0053/">CVE-2011-0053</cve>
	<bugzilla href="https://bugzilla.suse.com/667155">SUSE bug 667155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679570">SUSE bug 679570</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0061</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0061" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0061" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0061" ref_url="https://www.suse.com/security/cve/CVE-2011-0061" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0169-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0061/">CVE-2011-0061</cve>
	<bugzilla href="https://bugzilla.suse.com/667155">SUSE bug 667155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679570">SUSE bug 679570</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0062</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0062" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0062" ref_url="https://www.suse.com/security/cve/CVE-2011-0062" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0169-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.14 and Thunderbird 3.1.x before 3.1.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0062/">CVE-2011-0062</cve>
	<bugzilla href="https://bugzilla.suse.com/667155">SUSE bug 667155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679570">SUSE bug 679570</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0064</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0064" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0064" ref_url="https://www.suse.com/security/cve/CVE-2011-0064" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00019.html" source="SUSE-SU"/>
    <description>
    The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorrect index.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0064/">CVE-2011-0064</cve>
	<bugzilla href="https://bugzilla.suse.com/666101">SUSE bug 666101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/672502">SUSE bug 672502</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486882" comment="libpango-1_0-0-32bit-1.40.14-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481461" comment="libpango-1_0-0-1.40.14-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481462" comment="pango-devel-1.40.14-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481463" comment="typelib-1_0-Pango-1_0-1.40.14-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0069</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0069" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0069" ref_url="https://www.suse.com/security/cve/CVE-2011-0069" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0070.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0069/">CVE-2011-0069</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0070</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0070" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0070" ref_url="https://www.suse.com/security/cve/CVE-2011-0070" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0069.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0070/">CVE-2011-0070</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0072</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0072" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0072" ref_url="https://www.suse.com/security/cve/CVE-2011-0072" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0074, CVE-2011-0075, CVE-2011-0077, and CVE-2011-0078.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0072/">CVE-2011-0072</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0074</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0074" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0074" ref_url="https://www.suse.com/security/cve/CVE-2011-0074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0072, CVE-2011-0075, CVE-2011-0077, and CVE-2011-0078.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0074/">CVE-2011-0074</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0075</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0075" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0075" ref_url="https://www.suse.com/security/cve/CVE-2011-0075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0072, CVE-2011-0074, CVE-2011-0077, and CVE-2011-0078.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0075/">CVE-2011-0075</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0077</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0077" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0077" ref_url="https://www.suse.com/security/cve/CVE-2011-0077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0072, CVE-2011-0074, CVE-2011-0075, and CVE-2011-0078.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0077/">CVE-2011-0077</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0078</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0078" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0078" ref_url="https://www.suse.com/security/cve/CVE-2011-0078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0072, CVE-2011-0074, CVE-2011-0075, and CVE-2011-0077.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0078/">CVE-2011-0078</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0079</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0079" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0079" ref_url="https://www.suse.com/security/cve/CVE-2011-0079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x before 4.0.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to gfx/layers/d3d10/ReadbackManagerD3D10.cpp and unknown other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0079/">CVE-2011-0079</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0080</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0080" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0080" ref_url="https://www.suse.com/security/cve/CVE-2011-0080" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0080/">CVE-2011-0080</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0081</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0081" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0081" ref_url="https://www.suse.com/security/cve/CVE-2011-0081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.17 and 4.x before 4.0.1, and Thunderbird 3.1.x before 3.1.10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0081/">CVE-2011-0081</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0083</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0083" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0083" ref_url="https://www.suse.com/security/cve/CVE-2011-0083" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0083/">CVE-2011-0083</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0084</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0084" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0084" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0084" ref_url="https://www.suse.com/security/cve/CVE-2011-0084" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0967-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0958-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0084/">CVE-2011-0084</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0085</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0085" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0085" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0085" ref_url="https://www.suse.com/security/cve/CVE-2011-0085" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via a crafted XUL document that dequeues the current command updater.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0085/">CVE-2011-0085</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/701995">SUSE bug 701995</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0192</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0192" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0192" ref_url="https://www.suse.com/security/cve/CVE-2011-0192" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF Internet Fax image file that has been compressed using CCITT Group 4 encoding, related to the EXPAND2D macro in libtiff/tif_fax3.h.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0192/">CVE-2011-0192</cve>
	<bugzilla href="https://bugzilla.suse.com/672510">SUSE bug 672510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/682053">SUSE bug 682053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/682871">SUSE bug 682871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0226</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0226" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0226" ref_url="https://www.suse.com/security/cve/CVE-2011-0226" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0852-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0226/">CVE-2011-0226</cve>
	<bugzilla href="https://bugzilla.suse.com/704612">SUSE bug 704612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/728044">SUSE bug 728044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110413" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0413</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0413" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0413" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0413" ref_url="https://www.suse.com/security/cve/CVE-2011-0413" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0098-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0413/">CVE-2011-0413</cve>
	<bugzilla href="https://bugzilla.suse.com/667655">SUSE bug 667655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680298">SUSE bug 680298</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0414</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0414" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0414" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0414" ref_url="https://www.suse.com/security/cve/CVE-2011-0414" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00016.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at the time of (1) an IXFR transfer or (2) a DDNS update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0414/">CVE-2011-0414</cve>
	<bugzilla href="https://bugzilla.suse.com/674431">SUSE bug 674431</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0419</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0419" ref_url="https://www.suse.com/security/cve/CVE-2011-0419" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0859-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00001.html" source="SUSE-SU"/>
    <description>
    Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0419/">CVE-2011-0419</cve>
	<bugzilla href="https://bugzilla.suse.com/693778">SUSE bug 693778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/700212">SUSE bug 700212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480063" comment="apr-devel-1.6.3-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480064" comment="libapr1-1.6.3-1.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0421</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0421" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0421" ref_url="https://www.suse.com/security/cve/CVE-2011-0421" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0449-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0645-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00032.html" source="SUSE-SU"/>
    <description>
    The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0421/">CVE-2011-0421</cve>
	<bugzilla href="https://bugzilla.suse.com/681193">SUSE bug 681193</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480830" comment="libzip-devel-1.5.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0460</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0460" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0460" ref_url="https://www.suse.com/security/cve/CVE-2011-0460" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00053.html" source="SUSE-SU"/>
    <description>
    The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0460/">CVE-2011-0460</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481196" comment="kbd-2.0.4-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481197" comment="kbd-legacy-2.0.4-8.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0461</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0461" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0461" ref_url="https://www.suse.com/security/cve/CVE-2011-0461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0171-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00007.html" source="SUSE-SU"/>
    <description>
    /etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0461/">CVE-2011-0461</cve>
	<bugzilla href="https://bugzilla.suse.com/665479">SUSE bug 665479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487715" comment="aaa_base-malloccheck-84.87+git20180409.04c9dae-3.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480982" comment="aaa_base-84.87+git20180409.04c9dae-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480983" comment="aaa_base-extras-84.87+git20180409.04c9dae-3.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0463</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0463" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0463" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0463" ref_url="https://www.suse.com/security/cve/CVE-2011-0463" source="SUSE CVE"/>
    <description>
    The ocfs2_prepare_page_for_write function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 (OCFS2) subsystem in the Linux kernel before 2.6.39-rc1 does not properly handle holes that cross page boundaries, which allows local users to obtain potentially sensitive information from uninitialized disk locations by reading a file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-09"/>
	<updated date="2023-07-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0463/">CVE-2011-0463</cve>
	<bugzilla href="https://bugzilla.suse.com/670595">SUSE bug 670595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673037">SUSE bug 673037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0465</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0465" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0465" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0465" ref_url="https://www.suse.com/security/cve/CVE-2011-0465" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0298-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00018.html" source="SUSE-SU"/>
    <description>
    xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0465/">CVE-2011-0465</cve>
	<bugzilla href="https://bugzilla.suse.com/674733">SUSE bug 674733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/688931">SUSE bug 688931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480964" comment="xorg-x11-7.6_1-1.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480965" comment="xorg-x11-essentials-7.6_1-1.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481675" comment="xrdb-1.1.0-3.4.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0521</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0521" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0521" ref_url="https://www.suse.com/security/cve/CVE-2011-0521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The dvb_ca_ioctl function in drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel before 2.6.38-rc2 does not check the sign of a certain integer field, which allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a negative value.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0521/">CVE-2011-0521</cve>
	<bugzilla href="https://bugzilla.suse.com/666836">SUSE bug 666836</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0523</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0523" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0523" ref_url="https://www.suse.com/security/cve/CVE-2011-0523" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0884-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00034.html" source="SUSE-SU"/>
    <description>
    gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0523/">CVE-2011-0523</cve>
	<bugzilla href="https://bugzilla.suse.com/666839">SUSE bug 666839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482791" comment="libgypsy-devel-0.9-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482792" comment="libgypsy0-0.9-2.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0524</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0524" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0524" ref_url="https://www.suse.com/security/cve/CVE-2011-0524" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0884-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00034.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0524/">CVE-2011-0524</cve>
	<bugzilla href="https://bugzilla.suse.com/666839">SUSE bug 666839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482791" comment="libgypsy-devel-0.9-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482792" comment="libgypsy0-0.9-2.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0541</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0541" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0541" ref_url="https://www.suse.com/security/cve/CVE-2011-0541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0264-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0265-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00039.html" source="SUSE-SU"/>
    <description>
    fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-18"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-0541/">CVE-2011-0541</cve>
	<bugzilla href="https://bugzilla.suse.com/668820">SUSE bug 668820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/685055">SUSE bug 685055</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481128" comment="fuse-2.9.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481129" comment="fuse-devel-2.9.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481130" comment="fuse-doc-2.9.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481131" comment="libfuse2-2.9.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481132" comment="libulockmgr1-2.9.7-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0699</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0699" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0699" ref_url="https://www.suse.com/security/cve/CVE-2011-0699" source="SUSE CVE"/>
    <description>
    Integer signedness error in the btrfs_ioctl_space_info function in the Linux kernel 2.6.37 allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted slot value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-0699/">CVE-2011-0699</cve>
	<bugzilla href="https://bugzilla.suse.com/1167455">SUSE bug 1167455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0709</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0709" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0709" ref_url="https://www.suse.com/security/cve/CVE-2011-0709" source="SUSE CVE"/>
    <description>
    The br_mdb_ip_get function in net/bridge/br_multicast.c in the Linux kernel before 2.6.35-rc5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an IGMP packet, related to lack of a multicast table.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-0709/">CVE-2011-0709</cve>
	<bugzilla href="https://bugzilla.suse.com/672493">SUSE bug 672493</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0710</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0710" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0710" ref_url="https://www.suse.com/security/cve/CVE-2011-0710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0710/">CVE-2011-0710</cve>
	<bugzilla href="https://bugzilla.suse.com/672492">SUSE bug 672492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0711</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0711" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0711" ref_url="https://www.suse.com/security/cve/CVE-2011-0711" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRY_V1 ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0711/">CVE-2011-0711</cve>
	<bugzilla href="https://bugzilla.suse.com/672505">SUSE bug 672505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/672524">SUSE bug 672524</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0712</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0712" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0712" ref_url="https://www.suse.com/security/cve/CVE-2011-0712" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-03-01"/>
	<updated date="2023-03-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0712/">CVE-2011-0712</cve>
	<bugzilla href="https://bugzilla.suse.com/672499">SUSE bug 672499</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0715</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0715" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0715" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0715" ref_url="https://www.suse.com/security/cve/CVE-2011-0715" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0238-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00011.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0715/">CVE-2011-0715</cve>
	<bugzilla href="https://bugzilla.suse.com/676949">SUSE bug 676949</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110726" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0726</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0726" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0726" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0726" ref_url="https://www.suse.com/security/cve/CVE-2011-0726" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
    <description>
    The do_task_stat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the start_code and end_code fields in the /proc/#####/stat file for a process executing a PIE binary.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-0726/">CVE-2011-0726</cve>
	<bugzilla href="https://bugzilla.suse.com/701254">SUSE bug 701254</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0904</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0904" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0904" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0904" ref_url="https://www.suse.com/security/cve/CVE-2011-0904" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0481-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00027.html" source="SUSE-SU"/>
    <description>
    The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0904/">CVE-2011-0904</cve>
	<bugzilla href="https://bugzilla.suse.com/690238">SUSE bug 690238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/691207">SUSE bug 691207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/691356">SUSE bug 691356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487166" comment="vino-3.22.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487167" comment="vino-lang-3.22.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0905</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0905" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0905" ref_url="https://www.suse.com/security/cve/CVE-2011-0905" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0481-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00027.html" source="SUSE-SU"/>
    <description>
    The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-0905/">CVE-2011-0905</cve>
	<bugzilla href="https://bugzilla.suse.com/690238">SUSE bug 690238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/691207">SUSE bug 691207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/691356">SUSE bug 691356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487166" comment="vino-3.22.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487167" comment="vino-lang-3.22.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0997</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0997" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0997" ref_url="https://www.suse.com/security/cve/CVE-2011-0997" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0320-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00032.html" source="SUSE-SU"/>
    <description>
    dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0997/">CVE-2011-0997</cve>
	<bugzilla href="https://bugzilla.suse.com/675052">SUSE bug 675052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/689182">SUSE bug 689182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/708527">SUSE bug 708527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/715172">SUSE bug 715172</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0999</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0999" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0999" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0999" ref_url="https://www.suse.com/security/cve/CVE-2011-0999" source="SUSE CVE"/>
    <description>
    mm/huge_memory.c in the Linux kernel before 2.6.38-rc5 does not prevent creation of a transparent huge page (THP) during the existence of a temporary stack for an exec system call, which allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0999/">CVE-2011-0999</cve>
	<bugzilla href="https://bugzilla.suse.com/1183531">SUSE bug 1183531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673261">SUSE bug 673261</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1010</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1010" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1010" ref_url="https://www.suse.com/security/cve/CVE-2011-1010" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the mac_partition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via a malformed Mac OS partition table.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1010/">CVE-2011-1010</cve>
	<bugzilla href="https://bugzilla.suse.com/673929">SUSE bug 673929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690537">SUSE bug 690537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1012</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1012" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1012" ref_url="https://www.suse.com/security/cve/CVE-2011-1012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    The ldm_parse_vmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the VMDB structure in an LDM partition table, which allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted partition table.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-02-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1012/">CVE-2011-1012</cve>
	<bugzilla href="https://bugzilla.suse.com/674254">SUSE bug 674254</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1013</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1013" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1013" ref_url="https://www.suse.com/security/cve/CVE-2011-1013" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2) sys/dev/pci/drm/drm_irq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and consequently cause a denial of service (system crash) or possibly have unspecified other impact, via a crafted num_crtcs (aka vb_num) structure member in an ioctl argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1013/">CVE-2011-1013</cve>
	<bugzilla href="https://bugzilla.suse.com/674691">SUSE bug 674691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1016</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1016" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1016" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1016" ref_url="https://www.suse.com/security/cve/CVE-2011-1016" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1016/">CVE-2011-1016</cve>
	<bugzilla href="https://bugzilla.suse.com/674691">SUSE bug 674691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/674693">SUSE bug 674693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1017</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1017" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1017" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1017" ref_url="https://www.suse.com/security/cve/CVE-2011-1017" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-06"/>
	<updated date="2023-07-06"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1017/">CVE-2011-1017</cve>
	<bugzilla href="https://bugzilla.suse.com/674648">SUSE bug 674648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698221">SUSE bug 698221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1019</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1019" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1019" ref_url="https://www.suse.com/security/cve/CVE-2011-1019" source="SUSE CVE"/>
    <description>
    The dev_load function in net/core/dev.c in the Linux kernel before 2.6.38 allows local users to bypass an intended CAP_SYS_MODULE capability requirement and load arbitrary modules by leveraging the CAP_NET_ADMIN capability.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1019/">CVE-2011-1019</cve>
	<bugzilla href="https://bugzilla.suse.com/674978">SUSE bug 674978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1020</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1020" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1020" ref_url="https://www.suse.com/security/cve/CVE-2011-1020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1020/">CVE-2011-1020</cve>
	<bugzilla href="https://bugzilla.suse.com/674982">SUSE bug 674982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1021</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1021" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1021" ref_url="https://www.suse.com/security/cve/CVE-2011-1021" source="SUSE CVE"/>
    <description>
    drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by leveraging root privileges to write to the /sys/kernel/debug/acpi/custom_method file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4347.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1021/">CVE-2011-1021</cve>
	<bugzilla href="https://bugzilla.suse.com/674988">SUSE bug 674988</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1023</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1023" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1023" ref_url="https://www.suse.com/security/cve/CVE-2011-1023" source="SUSE CVE"/>
    <description>
    The Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service (BUG_ON and system crash) via vectors involving (1) a loopback (aka loop) transmit operation or (2) an InfiniBand (aka ib) transmit operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1023/">CVE-2011-1023</cve>
	<bugzilla href="https://bugzilla.suse.com/676707">SUSE bug 676707</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/703752">SUSE bug 703752</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1076</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1076" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1076" ref_url="https://www.suse.com/security/cve/CVE-2011-1076" source="SUSE CVE"/>
    <description>
    net/dns_resolver/dns_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service (NULL pointer dereference and OOPS) by not providing a valid response to a DNS query, as demonstrated by an erroneous grand.centrall.org query, which triggers improper handling of error data within a DNS resolver key.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1076/">CVE-2011-1076</cve>
	<bugzilla href="https://bugzilla.suse.com/702355">SUSE bug 702355</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1078</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1078" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1078" ref_url="https://www.suse.com/security/cve/CVE-2011-1078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
    <description>
    The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCO_CONNINFO option.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1078/">CVE-2011-1078</cve>
	<bugzilla href="https://bugzilla.suse.com/676601">SUSE bug 676601</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1079</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1079" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1079" ref_url="https://www.suse.com/security/cve/CVE-2011-1079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
    <description>
    The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1079/">CVE-2011-1079</cve>
	<bugzilla href="https://bugzilla.suse.com/1139868">SUSE bug 1139868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/676601">SUSE bug 676601</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1080</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1080" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1080" ref_url="https://www.suse.com/security/cve/CVE-2011-1080" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1080/">CVE-2011-1080</cve>
	<bugzilla href="https://bugzilla.suse.com/676602">SUSE bug 676602</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1082</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1082" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1082" ref_url="https://www.suse.com/security/cve/CVE-2011-1082" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1082/">CVE-2011-1082</cve>
	<bugzilla href="https://bugzilla.suse.com/676202">SUSE bug 676202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690537">SUSE bug 690537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1083</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1083" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1083" ref_url="https://www.suse.com/security/cve/CVE-2011-1083" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0540-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1083/">CVE-2011-1083</cve>
	<bugzilla href="https://bugzilla.suse.com/676204">SUSE bug 676204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690537">SUSE bug 690537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1090</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1090" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1090" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1090" ref_url="https://www.suse.com/security/cve/CVE-2011-1090" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-20"/>
	<updated date="2023-02-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1090/">CVE-2011-1090</cve>
	<bugzilla href="https://bugzilla.suse.com/677286">SUSE bug 677286</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111091" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1091</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1091" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1091" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1091" ref_url="https://www.suse.com/security/cve/CVE-2011-1091" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00025.html" source="SUSE-SU"/>
    <description>
    libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG notification packet, and allows (2) remote Yahoo! servers to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG SMS message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1091/">CVE-2011-1091</cve>
	<bugzilla href="https://bugzilla.suse.com/736189">SUSE bug 736189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1093</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1093" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1093" ref_url="https://www.suse.com/security/cve/CVE-2011-1093" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    The dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control Protocol (DCCP) implementation in the Linux kernel before 2.6.38 does not properly handle packets for a CLOSED endpoint, which allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending a DCCP-Close packet followed by a DCCP-Reset packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1093/">CVE-2011-1093</cve>
	<bugzilla href="https://bugzilla.suse.com/677676">SUSE bug 677676</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1097</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1097" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1097" ref_url="https://www.suse.com/security/cve/CVE-2011-1097" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0441-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00007.html" source="SUSE-SU"/>
    <description>
    rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1097/">CVE-2011-1097</cve>
	<bugzilla href="https://bugzilla.suse.com/684387">SUSE bug 684387</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480919" comment="rsync-3.1.3-2.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1098</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1098" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1098" ref_url="https://www.suse.com/security/cve/CVE-2011-1098" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0536-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00055.html" source="SUSE-SU"/>
    <description>
    Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1098/">CVE-2011-1098</cve>
	<bugzilla href="https://bugzilla.suse.com/1007000">SUSE bug 1007000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136195">SUSE bug 1136195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/677335">SUSE bug 677335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/677336">SUSE bug 677336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481596" comment="logrotate-3.13.0-4.3.9 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1145</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1145" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1145" ref_url="https://www.suse.com/security/cve/CVE-2011-1145" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00034.html" source="SUSE-SU"/>
    <description>
    The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-08-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-1145/">CVE-2011-1145</cve>
	<bugzilla href="https://bugzilla.suse.com/678796">SUSE bug 678796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/764737">SUSE bug 764737</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334325" comment="unixODBC is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480950" comment="unixODBC-2.3.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480951" comment="unixODBC-devel-2.3.6-1.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009654123" comment="libodbc2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654124" comment="libodbc2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334325" comment="unixODBC is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337632" comment="unixODBC-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337630" comment="unixODBC-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337633" comment="unixODBC-devel-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009654123" comment="libodbc2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654124" comment="libodbc2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654125" comment="libodbc2-64bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334325" comment="unixODBC is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337632" comment="unixODBC-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654126" comment="unixODBC-64bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337630" comment="unixODBC-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337633" comment="unixODBC-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654127" comment="unixODBC-devel-64bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1154</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1154" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1154" ref_url="https://www.suse.com/security/cve/CVE-2011-1154" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0536-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00055.html" source="SUSE-SU"/>
    <description>
    The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1154/">CVE-2011-1154</cve>
	<bugzilla href="https://bugzilla.suse.com/677335">SUSE bug 677335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679661">SUSE bug 679661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/681984">SUSE bug 681984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481596" comment="logrotate-3.13.0-4.3.9 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1155</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1155" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1155" ref_url="https://www.suse.com/security/cve/CVE-2011-1155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0536-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00055.html" source="SUSE-SU"/>
    <description>
    The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1155/">CVE-2011-1155</cve>
	<bugzilla href="https://bugzilla.suse.com/677335">SUSE bug 677335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679662">SUSE bug 679662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481596" comment="logrotate-3.13.0-4.3.9 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1160</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1160" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1160" ref_url="https://www.suse.com/security/cve/CVE-2011-1160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1160/">CVE-2011-1160</cve>
	<bugzilla href="https://bugzilla.suse.com/680040">SUSE bug 680040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1162</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1162" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1162" ref_url="https://www.suse.com/security/cve/CVE-2011-1162" source="SUSE CVE"/>
    <description>
    The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1162/">CVE-2011-1162</cve>
	<bugzilla href="https://bugzilla.suse.com/680040">SUSE bug 680040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1163</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1163" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1163" ref_url="https://www.suse.com/security/cve/CVE-2011-1163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1163/">CVE-2011-1163</cve>
	<bugzilla href="https://bugzilla.suse.com/679812">SUSE bug 679812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1164</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1164" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1164" ref_url="https://www.suse.com/security/cve/CVE-2011-1164" source="SUSE CVE"/>
    <description>
    Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier for remote attackers to perform attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1164/">CVE-2011-1164</cve>
	<bugzilla href="https://bugzilla.suse.com/680072">SUSE bug 680072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487166" comment="vino-3.22.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487167" comment="vino-lang-3.22.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1167</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1167" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1167" ref_url="https://www.suse.com/security/cve/CVE-2011-1167" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0409-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00079.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1167/">CVE-2011-1167</cve>
	<bugzilla href="https://bugzilla.suse.com/683337">SUSE bug 683337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1169</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1169" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1169" ref_url="https://www.suse.com/security/cve/CVE-2011-1169" source="SUSE CVE"/>
    <description>
    Array index error in the asihpi_hpi_ioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI driver in the Linux kernel before 2.6.38.1 might allow local users to cause a denial of service (memory corruption) or possibly gain privileges via a crafted adapter index value that triggers access to an invalid kernel pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1169/">CVE-2011-1169</cve>
	<bugzilla href="https://bugzilla.suse.com/680816">SUSE bug 680816</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1170</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1170" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1170" ref_url="https://www.suse.com/security/cve/CVE-2011-1170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1170/">CVE-2011-1170</cve>
	<bugzilla href="https://bugzilla.suse.com/681180">SUSE bug 681180</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1171</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1171" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1171" ref_url="https://www.suse.com/security/cve/CVE-2011-1171" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1171/">CVE-2011-1171</cve>
	<bugzilla href="https://bugzilla.suse.com/681181">SUSE bug 681181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1172</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1172" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1172" ref_url="https://www.suse.com/security/cve/CVE-2011-1172" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1172/">CVE-2011-1172</cve>
	<bugzilla href="https://bugzilla.suse.com/681185">SUSE bug 681185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/693976">SUSE bug 693976</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1173</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1173" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1173" ref_url="https://www.suse.com/security/cve/CVE-2011-1173" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the x86_64 platform allows remote attackers to obtain potentially sensitive information from kernel stack memory by reading uninitialized data in the ah field of an Acorn Universal Networking (AUN) packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1173/">CVE-2011-1173</cve>
	<bugzilla href="https://bugzilla.suse.com/681186">SUSE bug 681186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1176</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1176" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1176" ref_url="https://www.suse.com/security/cve/CVE-2011-1176" source="SUSE CVE"/>
    <description>
    The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1176/">CVE-2011-1176</cve>
	<bugzilla href="https://bugzilla.suse.com/681176">SUSE bug 681176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1182</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1182" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1182" ref_url="https://www.suse.com/security/cve/CVE-2011-1182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1182/">CVE-2011-1182</cve>
	<bugzilla href="https://bugzilla.suse.com/681826">SUSE bug 681826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690537">SUSE bug 690537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1187</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1187" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1187" ref_url="https://www.suse.com/security/cve/CVE-2011-1187" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-1187/">CVE-2011-1187</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1202</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1202" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1202" ref_url="https://www.suse.com/security/cve/CVE-2011-1202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
    <description>
    The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1202/">CVE-2011-1202</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/692619">SUSE bug 692619</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1410</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1410" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1410" ref_url="https://www.suse.com/security/cve/CVE-2011-1410" source="SUSE CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-1410/">CVE-2011-1410</cve>
	<bugzilla href="https://bugzilla.suse.com/706386">SUSE bug 706386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655193" comment="openssh-askpass-gnome is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1478</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1478" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1478" ref_url="https://www.suse.com/security/cve/CVE-2011-1478" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel before 2.6.38 does not reset the values of certain structure members, which might allow remote attackers to cause a denial of service (NULL pointer dereference) via a malformed VLAN frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1478/">CVE-2011-1478</cve>
	<bugzilla href="https://bugzilla.suse.com/682965">SUSE bug 682965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698450">SUSE bug 698450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1479</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1479" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1479" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1479" ref_url="https://www.suse.com/security/cve/CVE-2011-1479" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1479/">CVE-2011-1479</cve>
	<bugzilla href="https://bugzilla.suse.com/655693">SUSE bug 655693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1485</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1485" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1485" ref_url="https://www.suse.com/security/cve/CVE-2011-1485" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0412-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0413-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00081.html" source="SUSE-SU"/>
    <description>
    Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1485/">CVE-2011-1485</cve>
	<bugzilla href="https://bugzilla.suse.com/1032717">SUSE bug 1032717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/688788">SUSE bug 688788</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481468" comment="libpolkit0-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481469" comment="polkit-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481470" comment="polkit-devel-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481471" comment="typelib-1_0-Polkit-1_0-0.114-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1488</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1488" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1488" ref_url="https://www.suse.com/security/cve/CVE-2011-1488" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00033.html" source="SUSE-SU"/>
    <description>
    A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-1488/">CVE-2011-1488</cve>
	<bugzilla href="https://bugzilla.suse.com/679030">SUSE bug 679030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/681568">SUSE bug 681568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335178" comment="rsyslog-module-gssapi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335179" comment="rsyslog-module-gtls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338825" comment="rsyslog-module-mmnormalize is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335180" comment="rsyslog-module-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335181" comment="rsyslog-module-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335182" comment="rsyslog-module-relp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335183" comment="rsyslog-module-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335184" comment="rsyslog-module-udpspoof is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335178" comment="rsyslog-module-gssapi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335179" comment="rsyslog-module-gtls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338825" comment="rsyslog-module-mmnormalize is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335180" comment="rsyslog-module-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335181" comment="rsyslog-module-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335182" comment="rsyslog-module-relp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335183" comment="rsyslog-module-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335184" comment="rsyslog-module-udpspoof is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1489</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1489" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1489" ref_url="https://www.suse.com/security/cve/CVE-2011-1489" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00033.html" source="SUSE-SU"/>
    <description>
    A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-1489/">CVE-2011-1489</cve>
	<bugzilla href="https://bugzilla.suse.com/681568">SUSE bug 681568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335178" comment="rsyslog-module-gssapi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335179" comment="rsyslog-module-gtls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338825" comment="rsyslog-module-mmnormalize is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335180" comment="rsyslog-module-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335181" comment="rsyslog-module-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335182" comment="rsyslog-module-relp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335183" comment="rsyslog-module-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335184" comment="rsyslog-module-udpspoof is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335178" comment="rsyslog-module-gssapi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335179" comment="rsyslog-module-gtls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338825" comment="rsyslog-module-mmnormalize is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335180" comment="rsyslog-module-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335181" comment="rsyslog-module-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335182" comment="rsyslog-module-relp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335183" comment="rsyslog-module-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335184" comment="rsyslog-module-udpspoof is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1490</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1490" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1490" ref_url="https://www.suse.com/security/cve/CVE-2011-1490" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00033.html" source="SUSE-SU"/>
    <description>
    A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-1490/">CVE-2011-1490</cve>
	<bugzilla href="https://bugzilla.suse.com/681568">SUSE bug 681568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335178" comment="rsyslog-module-gssapi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335179" comment="rsyslog-module-gtls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338825" comment="rsyslog-module-mmnormalize is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335180" comment="rsyslog-module-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335181" comment="rsyslog-module-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335182" comment="rsyslog-module-relp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335183" comment="rsyslog-module-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335184" comment="rsyslog-module-udpspoof is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335178" comment="rsyslog-module-gssapi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335179" comment="rsyslog-module-gtls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338825" comment="rsyslog-module-mmnormalize is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335180" comment="rsyslog-module-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335181" comment="rsyslog-module-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335182" comment="rsyslog-module-relp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335183" comment="rsyslog-module-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335184" comment="rsyslog-module-udpspoof is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1493</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1493" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1493" ref_url="https://www.suse.com/security/cve/CVE-2011-1493" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by composing FAC_NATIONAL_DIGIS data that specifies a large number of digipeaters, and then sending this data to a ROSE socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1493/">CVE-2011-1493</cve>
	<bugzilla href="https://bugzilla.suse.com/681175">SUSE bug 681175</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1494</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1494" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1494" ref_url="https://www.suse.com/security/cve/CVE-2011-1494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-03-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1494/">CVE-2011-1494</cve>
	<bugzilla href="https://bugzilla.suse.com/685402">SUSE bug 685402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1495</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1495" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1495" ref_url="https://www.suse.com/security/cve/CVE-2011-1495" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
    <description>
    drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-11"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1495/">CVE-2011-1495</cve>
	<bugzilla href="https://bugzilla.suse.com/685402">SUSE bug 685402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1521</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1521" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1521" ref_url="https://www.suse.com/security/cve/CVE-2011-1521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00030.html" source="SUSE-SU"/>
    <description>
    The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1521/">CVE-2011-1521</cve>
	<bugzilla href="https://bugzilla.suse.com/682554">SUSE bug 682554</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1573</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1573" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1573" ref_url="https://www.suse.com/security/cve/CVE-2011-1573" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-1573/">CVE-2011-1573</cve>
	<bugzilla href="https://bugzilla.suse.com/686813">SUSE bug 686813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1576</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1576" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1576" ref_url="https://www.suse.com/security/cve/CVE-2011-1576" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
    <description>
    The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1576/">CVE-2011-1576</cve>
	<bugzilla href="https://bugzilla.suse.com/698450">SUSE bug 698450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1577</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1577" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1577" ref_url="https://www.suse.com/security/cve/CVE-2011-1577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:042" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-17"/>
	<updated date="2023-05-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1577/">CVE-2011-1577</cve>
	<bugzilla href="https://bugzilla.suse.com/687113">SUSE bug 687113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/692784">SUSE bug 692784</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1585</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1585" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1585" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1585" ref_url="https://www.suse.com/security/cve/CVE-2011-1585" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1585/">CVE-2011-1585</cve>
	<bugzilla href="https://bugzilla.suse.com/687812">SUSE bug 687812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1598</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1598" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1598" ref_url="https://www.suse.com/security/cve/CVE-2011-1598" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
    <description>
    The bcm_release function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1598/">CVE-2011-1598</cve>
	<bugzilla href="https://bugzilla.suse.com/688685">SUSE bug 688685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/689038">SUSE bug 689038</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1709</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1709" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1709" ref_url="https://www.suse.com/security/cve/CVE-2011-1709" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00000.html" source="SUSE-SU"/>
    <description>
    GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1709/">CVE-2011-1709</cve>
	<bugzilla href="https://bugzilla.suse.com/694858">SUSE bug 694858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486606" comment="gdm-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486607" comment="gdm-devel-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486608" comment="gdm-lang-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486609" comment="gdmflexiserver-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486610" comment="libgdm1-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486611" comment="typelib-1_0-Gdm-1_0-3.26.2.1-13.19.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1745</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1745" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1745" ref_url="https://www.suse.com/security/cve/CVE-2011-1745" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-19"/>
	<updated date="2023-02-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1745/">CVE-2011-1745</cve>
	<bugzilla href="https://bugzilla.suse.com/689797">SUSE bug 689797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/693043">SUSE bug 693043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1747</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1747" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1747" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1747" ref_url="https://www.suse.com/security/cve/CVE-2011-1747" source="SUSE CVE"/>
    <description>
    The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not properly restrict memory allocation by the (1) AGPIOC_RESERVE and (2) AGPIOC_ALLOCATE ioctls, which allows local users to cause a denial of service (memory consumption) by making many calls to these ioctls.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-03-03"/>
	<updated date="2023-03-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1747/">CVE-2011-1747</cve>
	<bugzilla href="https://bugzilla.suse.com/689797">SUSE bug 689797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1752</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1752" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1752" ref_url="https://www.suse.com/security/cve/CVE-2011-1752" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00012.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1752/">CVE-2011-1752</cve>
	<bugzilla href="https://bugzilla.suse.com/698205">SUSE bug 698205</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1758</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1758" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1758" ref_url="https://www.suse.com/security/cve/CVE-2011-1758" source="SUSE CVE"/>
    <description>
    The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by listing the /tmp directory to obtain the pathname.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1758/">CVE-2011-1758</cve>
	<bugzilla href="https://bugzilla.suse.com/691135">SUSE bug 691135</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481381" comment="libipa_hbac-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481382" comment="libipa_hbac0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481383" comment="libsss_certmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481384" comment="libsss_certmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481385" comment="libsss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481386" comment="libsss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481387" comment="libsss_nss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481388" comment="libsss_nss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481389" comment="libsss_simpleifp-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481390" comment="libsss_simpleifp0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481391" comment="python3-sssd-config-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481392" comment="sssd-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481393" comment="sssd-32bit-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481394" comment="sssd-ad-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481395" comment="sssd-dbus-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481396" comment="sssd-ipa-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481397" comment="sssd-krb5-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481398" comment="sssd-krb5-common-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481399" comment="sssd-ldap-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481400" comment="sssd-proxy-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481401" comment="sssd-tools-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481402" comment="sssd-wbclient-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481403" comment="sssd-wbclient-devel-1.16.1-3.18.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1767</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1767" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1767" ref_url="https://www.suse.com/security/cve/CVE-2011-1767" source="SUSE CVE"/>
    <description>
    net/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip_gre is configured as a module, allows remote attackers to cause a denial of service (OOPS) by sending a packet during module loading.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1767/">CVE-2011-1767</cve>
	<bugzilla href="https://bugzilla.suse.com/692239">SUSE bug 692239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111770" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1770</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1770" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1770" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1770" ref_url="https://www.suse.com/security/cve/CVE-2011-1770" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature options length, which triggers a buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-08"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-1770/">CVE-2011-1770</cve>
	<bugzilla href="https://bugzilla.suse.com/692498">SUSE bug 692498</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1771</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1771" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1771" ref_url="https://www.suse.com/security/cve/CVE-2011-1771" source="SUSE CVE"/>
    <description>
    The cifs_close function in fs/cifs/file.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact by setting the O_DIRECT flag during an attempt to open a file on a CIFS filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-1771/">CVE-2011-1771</cve>
	<bugzilla href="https://bugzilla.suse.com/692497">SUSE bug 692497</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1776</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1776" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1776" ref_url="https://www.suse.com/security/cve/CVE-2011-1776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:042" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1222-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allows physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-1776/">CVE-2011-1776</cve>
	<bugzilla href="https://bugzilla.suse.com/692784">SUSE bug 692784</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1783</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1783" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1783" ref_url="https://www.suse.com/security/cve/CVE-2011-1783" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00012.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1783/">CVE-2011-1783</cve>
	<bugzilla href="https://bugzilla.suse.com/698205">SUSE bug 698205</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1831</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1831" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1831" ref_url="https://www.suse.com/security/cve/CVE-2011-1831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
    <description>
    utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privileges, via a mount system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1831/">CVE-2011-1831</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480202" comment="ecryptfs-utils-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480203" comment="ecryptfs-utils-devel-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480204" comment="libecryptfs1-111-2.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1832</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1832" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1832" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1832" ref_url="https://www.suse.com/security/cve/CVE-2011-1832" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
    <description>
    utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1832/">CVE-2011-1832</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480202" comment="ecryptfs-utils-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480203" comment="ecryptfs-utils-devel-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480204" comment="libecryptfs1-111-2.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1833</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1833" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1833" ref_url="https://www.suse.com/security/cve/CVE-2011-1833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1222-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00007.html" source="SUSE-SU"/>
    <description>
    Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1833/">CVE-2011-1833</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480202" comment="ecryptfs-utils-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480203" comment="ecryptfs-utils-devel-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480204" comment="libecryptfs1-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1834</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1834" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1834" ref_url="https://www.suse.com/security/cve/CVE-2011-1834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
    <description>
    utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service (table corruption) or bypass intended unmounting restrictions via a umount system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1834/">CVE-2011-1834</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480202" comment="ecryptfs-utils-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480203" comment="ecryptfs-utils-devel-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480204" comment="libecryptfs1-111-2.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1835</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1835" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1835" ref_url="https://www.suse.com/security/cve/CVE-2011-1835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
    <description>
    The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1835/">CVE-2011-1835</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480202" comment="ecryptfs-utils-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480203" comment="ecryptfs-utils-devel-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480204" comment="libecryptfs1-111-2.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1836</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1836" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1836" ref_url="https://www.suse.com/security/cve/CVE-2011-1836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
    <description>
    utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1836/">CVE-2011-1836</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480202" comment="ecryptfs-utils-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480203" comment="ecryptfs-utils-devel-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480204" comment="libecryptfs1-111-2.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1837</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1837" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1837" ref_url="https://www.suse.com/security/cve/CVE-2011-1837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
    <description>
    The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1837/">CVE-2011-1837</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480202" comment="ecryptfs-utils-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480203" comment="ecryptfs-utils-devel-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480204" comment="libecryptfs1-111-2.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1907</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1907" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1907" ref_url="https://www.suse.com/security/cve/CVE-2011-1907" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0666-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00077.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1907/">CVE-2011-1907</cve>
	<bugzilla href="https://bugzilla.suse.com/692210">SUSE bug 692210</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1910</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1910" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1910" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1910" ref_url="https://www.suse.com/security/cve/CVE-2011-1910" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0603-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00014.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1910/">CVE-2011-1910</cve>
	<bugzilla href="https://bugzilla.suse.com/696585">SUSE bug 696585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698286">SUSE bug 698286</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111921" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1921</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1921" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1921" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1921" ref_url="https://www.suse.com/security/cve/CVE-2011-1921" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00012.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1921/">CVE-2011-1921</cve>
	<bugzilla href="https://bugzilla.suse.com/698205">SUSE bug 698205</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111927" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1927</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1927" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1927" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1927" ref_url="https://www.suse.com/security/cve/CVE-2011-1927" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
    <description>
    The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIME_EXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service (invalid pointer dereference) via crafted fragmented packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1927/">CVE-2011-1927</cve>
	<bugzilla href="https://bugzilla.suse.com/694498">SUSE bug 694498</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1928</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1928" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1928" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1928" ref_url="https://www.suse.com/security/cve/CVE-2011-1928" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0859-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00001.html" source="SUSE-SU"/>
    <description>
    The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1928/">CVE-2011-1928</cve>
	<bugzilla href="https://bugzilla.suse.com/693778">SUSE bug 693778</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480063" comment="apr-devel-1.6.3-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480064" comment="libapr1-1.6.3-1.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1944</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1944" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1944" ref_url="https://www.suse.com/security/cve/CVE-2011-1944" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0839-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00035.html" source="SUSE-SU"/>
    <description>
    Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-1944/">CVE-2011-1944</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/697372">SUSE bug 697372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1947</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1947" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1947" ref_url="https://www.suse.com/security/cve/CVE-2011-1947" source="SUSE CVE"/>
    <description>
    fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1947/">CVE-2011-1947</cve>
	<bugzilla href="https://bugzilla.suse.com/697368">SUSE bug 697368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480228" comment="fetchmail-6.3.26-3.27 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482674" comment="fetchmailconf-6.3.26-3.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2054</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2054" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2054" ref_url="https://www.suse.com/security/cve/CVE-2011-2054" source="SUSE CVE"/>
    <description>
    A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker must have the correct primary credentials in order to successfully exploit this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-2054/">CVE-2011-2054</cve>
	<bugzilla href="https://bugzilla.suse.com/709167">SUSE bug 709167</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481487" comment="libsoup-2_4-1-2.62.2-3.3.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481488" comment="libsoup-lang-2.62.2-3.3.32 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486883" comment="libsoup-devel-2.62.2-3.3.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486884" comment="typelib-1_0-Soup-2_4-2.62.2-3.3.32 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2182</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2182" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2182" ref_url="https://www.suse.com/security/cve/CVE-2011-2182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory allocation for non-initial fragments, which might allow local users to conduct buffer overflow attacks, and gain privileges or obtain sensitive information, via a crafted LDM partition table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1017.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2182/">CVE-2011-2182</cve>
	<bugzilla href="https://bugzilla.suse.com/674648">SUSE bug 674648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698221">SUSE bug 698221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2186</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2186" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2186" ref_url="https://www.suse.com/security/cve/CVE-2011-2186" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0705-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00043.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2186/">CVE-2011-2186</cve>
	<bugzilla href="https://bugzilla.suse.com/698456">SUSE bug 698456</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481138" comment="git-core-2.16.4-3.9.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487750" comment="git-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487751" comment="git-arch-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487752" comment="git-cvs-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487753" comment="git-daemon-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487754" comment="git-doc-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487755" comment="git-email-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487756" comment="git-gui-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487757" comment="git-svn-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487758" comment="git-web-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487759" comment="gitk-2.16.4-3.9.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2189</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2189" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2189" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2189" ref_url="https://www.suse.com/security/cve/CVE-2011-2189" source="SUSE CVE"/>
    <description>
    net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service (memory consumption) via requests to a daemon that requires a separate namespace per connection, as demonstrated by vsftpd.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2189/">CVE-2011-2189</cve>
	<bugzilla href="https://bugzilla.suse.com/698449">SUSE bug 698449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2199</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2199" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2199" ref_url="https://www.suse.com/security/cve/CVE-2011-2199" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0734-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00000.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2199/">CVE-2011-2199</cve>
	<bugzilla href="https://bugzilla.suse.com/699714">SUSE bug 699714</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480947" comment="tftp-5.2-3.22 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2203</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2203" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2203" ref_url="https://www.suse.com/security/cve/CVE-2011-2203" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    The hfs_find_init function in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and Oops) by mounting an HFS file system with a malformed MDB extent record.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-2203/">CVE-2011-2203</cve>
	<bugzilla href="https://bugzilla.suse.com/699709">SUSE bug 699709</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2213</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2213" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2213" ref_url="https://www.suse.com/security/cve/CVE-2011-2213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2213/">CVE-2011-2213</cve>
	<bugzilla href="https://bugzilla.suse.com/700879">SUSE bug 700879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2362</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2362" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2362" ref_url="https://www.suse.com/security/cve/CVE-2011-2362" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2362/">CVE-2011-2362</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2363</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2363" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2363" ref_url="https://www.suse.com/security/cve/CVE-2011-2363" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2363/">CVE-2011-2363</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/702020">SUSE bug 702020</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2364</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2364" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2364" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2364" ref_url="https://www.suse.com/security/cve/CVE-2011-2364" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2365.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2364/">CVE-2011-2364</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2365</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2365" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2365" ref_url="https://www.suse.com/security/cve/CVE-2011-2365" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2364.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2365/">CVE-2011-2365</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2367</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2367" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2367" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2367" ref_url="https://www.suse.com/security/cve/CVE-2011-2367" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
    <description>
    The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service (application crash), via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2367/">CVE-2011-2367</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2369</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2369" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2369" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2369" ref_url="https://www.suse.com/security/cve/CVE-2011-2369" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote attackers to inject arbitrary web script or HTML via an SVG element containing an HTML-encoded entity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2369/">CVE-2011-2369</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2370</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2370" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2370" ref_url="https://www.suse.com/security/cve/CVE-2011-2370" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a (1) add-on or (2) theme via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2370/">CVE-2011-2370</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2371</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2371" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2371" ref_url="https://www.suse.com/security/cve/CVE-2011-2371" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2371/">CVE-2011-2371</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2372</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2372" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2372" ref_url="https://www.suse.com/security/cve/CVE-2011-2372" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1079-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2372/">CVE-2011-2372</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2373</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2373" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2373" ref_url="https://www.suse.com/security/cve/CVE-2011-2373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript is disabled, allows remote attackers to execute arbitrary code via a crafted XUL document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2373/">CVE-2011-2373</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2374</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2374" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2374" ref_url="https://www.suse.com/security/cve/CVE-2011-2374" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2374/">CVE-2011-2374</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2376</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2376" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2376" ref_url="https://www.suse.com/security/cve/CVE-2011-2376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2376/">CVE-2011-2376</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2377</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2377" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2377" ref_url="https://www.suse.com/security/cve/CVE-2011-2377" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2377/">CVE-2011-2377</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2464</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2464" ref_url="https://www.suse.com/security/cve/CVE-2011-2464" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:029" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00006.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2464/">CVE-2011-2464</cve>
	<bugzilla href="https://bugzilla.suse.com/703907">SUSE bug 703907</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2482</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2482" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2482" ref_url="https://www.suse.com/security/cve/CVE-2011-2482" source="SUSE CVE"/>
    <description>
    A certain Red Hat patch to the sctp_sock_migrate function in net/sctp/socket.c in the Linux kernel before 2.6.21, as used in Red Hat Enterprise Linux (RHEL) 5, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted SCTP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2482/">CVE-2011-2482</cve>
	<bugzilla href="https://bugzilla.suse.com/735611">SUSE bug 735611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750395">SUSE bug 750395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2483</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2483" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2483" ref_url="https://www.suse.com/security/cve/CVE-2011-2483" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:035" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0921-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0921-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0970-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0972-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1137-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1138-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0480-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1670-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1676-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00028.html" source="SUSE-SU"/>
    <description>
    crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2483/">CVE-2011-2483</cve>
	<bugzilla href="https://bugzilla.suse.com/700876">SUSE bug 700876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/701489">SUSE bug 701489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/701491">SUSE bug 701491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/713727">SUSE bug 713727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/738221">SUSE bug 738221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749299">SUSE bug 749299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749301">SUSE bug 749301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749303">SUSE bug 749303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480940" comment="sysvinit-tools-2.88+-1.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480941" comment="whois-5.3.0-1.16 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2484</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2484" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2484" ref_url="https://www.suse.com/security/cve/CVE-2011-2484" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2484/">CVE-2011-2484</cve>
	<bugzilla href="https://bugzilla.suse.com/703153">SUSE bug 703153</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2485</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2485" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2485" ref_url="https://www.suse.com/security/cve/CVE-2011-2485" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000174.html" source="SUSE-SU"/>
    <description>
    The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle certain return values, which allows remote attackers to cause a denial of service (memory consumption) via a crafted GIF image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2485/">CVE-2011-2485</cve>
	<bugzilla href="https://bugzilla.suse.com/702028">SUSE bug 702028</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480251" comment="gdk-pixbuf-devel-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480252" comment="gdk-pixbuf-lang-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480253" comment="gdk-pixbuf-query-loaders-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480254" comment="gdk-pixbuf-thumbnailer-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480255" comment="libgdk_pixbuf-2_0-0-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480256" comment="typelib-1_0-GdkPixbuf-2_0-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482688" comment="gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482689" comment="libgdk_pixbuf-2_0-0-32bit-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2489</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2489" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2489" ref_url="https://www.suse.com/security/cve/CVE-2011-2489" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0848-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00039.html" source="SUSE-SU"/>
    <description>
    Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2489/">CVE-2011-2489</cve>
	<bugzilla href="https://bugzilla.suse.com/698772">SUSE bug 698772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480857" comment="opie-32bit-2.4-1.96 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2490</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2490" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2490" ref_url="https://www.suse.com/security/cve/CVE-2011-2490" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0848-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00039.html" source="SUSE-SU"/>
    <description>
    opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2490/">CVE-2011-2490</cve>
	<bugzilla href="https://bugzilla.suse.com/698772">SUSE bug 698772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480857" comment="opie-32bit-2.4-1.96 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2491</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2491" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2491" ref_url="https://www.suse.com/security/cve/CVE-2011-2491" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of service (system hang) via a LOCK_UN flock system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2491/">CVE-2011-2491</cve>
	<bugzilla href="https://bugzilla.suse.com/702013">SUSE bug 702013</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2492</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2492" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2492" ref_url="https://www.suse.com/security/cve/CVE-2011-2492" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2492/">CVE-2011-2492</cve>
	<bugzilla href="https://bugzilla.suse.com/702014">SUSE bug 702014</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2493</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2493" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2493" ref_url="https://www.suse.com/security/cve/CVE-2011-2493" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
    <description>
    The ext4_fill_super function in fs/ext4/super.c in the Linux kernel before 2.6.39 does not properly initialize a certain error-report data structure, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-2493/">CVE-2011-2493</cve>
	<bugzilla href="https://bugzilla.suse.com/701998">SUSE bug 701998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2494</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2494" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2494" ref_url="https://www.suse.com/security/cve/CVE-2011-2494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user's password.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-2494/">CVE-2011-2494</cve>
	<bugzilla href="https://bugzilla.suse.com/703156">SUSE bug 703156</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2497</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2497" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2497" ref_url="https://www.suse.com/security/cve/CVE-2011-2497" source="SUSE CVE"/>
    <description>
    Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2497/">CVE-2011-2497</cve>
	<bugzilla href="https://bugzilla.suse.com/702286">SUSE bug 702286</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2501</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2501" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2501" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2501" ref_url="https://www.suse.com/security/cve/CVE-2011-2501" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0915-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00026.html" source="SUSE-SU"/>
    <description>
    The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data.  NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2501/">CVE-2011-2501</cve>
	<bugzilla href="https://bugzilla.suse.com/702578">SUSE bug 702578</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2517</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2517" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2517" ref_url="https://www.suse.com/security/cve/CVE-2011-2517" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability during scan operations with a long SSID value.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2517/">CVE-2011-2517</cve>
	<bugzilla href="https://bugzilla.suse.com/703410">SUSE bug 703410</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2518</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2518" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2518" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2518" ref_url="https://www.suse.com/security/cve/CVE-2011-2518" source="SUSE CVE"/>
    <description>
    The tomoyo_mount_acl function in security/tomoyo/mount.c in the Linux kernel before 2.6.39.2 calls the kern_path function with arguments taken directly from a mount system call, which allows local users to cause a denial of service (OOPS) or possibly have unspecified other impact via a NULL value for the device name.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-03-01"/>
	<updated date="2023-03-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2518/">CVE-2011-2518</cve>
	<bugzilla href="https://bugzilla.suse.com/703158">SUSE bug 703158</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2525</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2525" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2525" ref_url="https://www.suse.com/security/cve/CVE-2011-2525" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
    <description>
    The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-2525/">CVE-2011-2525</cve>
	<bugzilla href="https://bugzilla.suse.com/735612">SUSE bug 735612</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2534</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2534" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2534" ref_url="https://www.suse.com/security/cve/CVE-2011-2534" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel before 2.6.39 might allow local users to cause a denial of service or have unspecified other impact via a crafted write operation, related to string data that lacks a terminating '\0' character.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2534/">CVE-2011-2534</cve>
	<bugzilla href="https://bugzilla.suse.com/681182">SUSE bug 681182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/702037">SUSE bug 702037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2689</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2689" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2689" ref_url="https://www.suse.com/security/cve/CVE-2011-2689" source="SUSE CVE"/>
    <description>
    The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2689/">CVE-2011-2689</cve>
	<bugzilla href="https://bugzilla.suse.com/710672">SUSE bug 710672</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2690</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2690" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2690" ref_url="https://www.suse.com/security/cve/CVE-2011-2690" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0915-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00026.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-2690/">CVE-2011-2690</cve>
	<bugzilla href="https://bugzilla.suse.com/706387">SUSE bug 706387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/706388">SUSE bug 706388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854395">SUSE bug 854395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2691</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2691" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2691" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2691" ref_url="https://www.suse.com/security/cve/CVE-2011-2691" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0915-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00026.html" source="SUSE-SU"/>
    <description>
    The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2691/">CVE-2011-2691</cve>
	<bugzilla href="https://bugzilla.suse.com/706388">SUSE bug 706388</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2692</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2692" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2692" ref_url="https://www.suse.com/security/cve/CVE-2011-2692" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0915-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00026.html" source="SUSE-SU"/>
    <description>
    The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-2692/">CVE-2011-2692</cve>
	<bugzilla href="https://bugzilla.suse.com/706389">SUSE bug 706389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854395">SUSE bug 854395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2695</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2695" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2695" ref_url="https://www.suse.com/security/cve/CVE-2011-2695" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1222-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00007.html" source="SUSE-SU"/>
    <description>
    Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsigned integer.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2695/">CVE-2011-2695</cve>
	<bugzilla href="https://bugzilla.suse.com/706374">SUSE bug 706374</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2696</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2696" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2696" ref_url="https://www.suse.com/security/cve/CVE-2011-2696" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0854-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2696/">CVE-2011-2696</cve>
	<bugzilla href="https://bugzilla.suse.com/705681">SUSE bug 705681</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481480" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2699</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2699" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2699" ref_url="https://www.suse.com/security/cve/CVE-2011-2699" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2699/">CVE-2011-2699</cve>
	<bugzilla href="https://bugzilla.suse.com/707288">SUSE bug 707288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2700</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2700" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2700" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2700" ref_url="https://www.suse.com/security/cve/CVE-2011-2700" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the si4713_write_econtrol_string function in drivers/media/radio/si4713-i2c.c in the Linux kernel before 2.6.39.4 on the N900 platform might allow local users to cause a denial of service or have unspecified other impact via a crafted s_ext_ctrls operation with a (1) V4L2_CID_RDS_TX_PS_NAME or (2) V4L2_CID_RDS_TX_RADIO_TEXT control ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2700/">CVE-2011-2700</cve>
	<bugzilla href="https://bugzilla.suse.com/707332">SUSE bug 707332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2707</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2707" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2707" ref_url="https://www.suse.com/security/cve/CVE-2011-2707" source="SUSE CVE"/>
    <description>
    The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allows local users to obtain sensitive information from kernel memory locations via a crafted PTRACE_SETXTREGS request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2707/">CVE-2011-2707</cve>
	<bugzilla href="https://bugzilla.suse.com/707337">SUSE bug 707337</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2721</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2721" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2721" ref_url="https://www.suse.com/security/cve/CVE-2011-2721" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0940-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00033.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2721/">CVE-2011-2721</cve>
	<bugzilla href="https://bugzilla.suse.com/708263">SUSE bug 708263</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2724</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2724" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2724" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2724" ref_url="https://www.suse.com/security/cve/CVE-2011-2724" source="SUSE CVE"/>
    <description>
    The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2011-2724/">CVE-2011-2724</cve>
	<bugzilla href="https://bugzilla.suse.com/1160791">SUSE bug 1160791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/709819">SUSE bug 709819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336017" comment="ctdb is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337885" comment="samba-ceph is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334838" comment="libdcerpc-binding0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334951" comment="libdcerpc-binding0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334980" comment="libdcerpc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334981" comment="libdcerpc-samr-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334982" comment="libdcerpc-samr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334839" comment="libdcerpc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334952" comment="libdcerpc0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334984" comment="libndr-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334985" comment="libndr-krb5pac-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334840" comment="libndr-krb5pac0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334954" comment="libndr-krb5pac0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334986" comment="libndr-nbt-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334841" comment="libndr-nbt0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334955" comment="libndr-nbt0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334987" comment="libndr-standard-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334842" comment="libndr-standard0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334956" comment="libndr-standard0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334843" comment="libndr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334957" comment="libndr0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334988" comment="libnetapi-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334844" comment="libnetapi0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334958" comment="libnetapi0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334991" comment="libsamba-credentials-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334845" comment="libsamba-credentials0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334960" comment="libsamba-credentials0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341004" comment="libsamba-errors-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334846" comment="libsamba-errors0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335571" comment="libsamba-errors0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334992" comment="libsamba-hostconfig-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334847" comment="libsamba-hostconfig0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334961" comment="libsamba-hostconfig0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334989" comment="libsamba-passdb-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334848" comment="libsamba-passdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334959" comment="libsamba-passdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334993" comment="libsamba-policy-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341005" comment="libsamba-policy-python3-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341006" comment="libsamba-policy0-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334995" comment="libsamba-util-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334849" comment="libsamba-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334962" comment="libsamba-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334996" comment="libsamdb-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334850" comment="libsamdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334963" comment="libsamdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334997" comment="libsmbclient-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334851" comment="libsmbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334999" comment="libsmbconf-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334852" comment="libsmbconf0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334966" comment="libsmbconf0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335000" comment="libsmbldap-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338826" comment="libsmbldap2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338827" comment="libsmbldap2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335003" comment="libtevent-util-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334854" comment="libtevent-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334968" comment="libtevent-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335004" comment="libwbclient-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334855" comment="libwbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334969" comment="libwbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335005" comment="samba-core-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338828" comment="samba-libs-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341011" comment="samba-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334973" comment="samba-winbind-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334994" comment="libsamba-policy0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341007" comment="samba-ad-dc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341008" comment="samba-dsdb-modules is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341009" comment="samba-libs-python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341010" comment="samba-python is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2748</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2748" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2748" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2748" ref_url="https://www.suse.com/security/cve/CVE-2011-2748" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1021-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html" source="SUSE-SU"/>
    <description>
    The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted DHCP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2748/">CVE-2011-2748</cve>
	<bugzilla href="https://bugzilla.suse.com/712653">SUSE bug 712653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2749</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2749" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2749" ref_url="https://www.suse.com/security/cve/CVE-2011-2749" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1021-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html" source="SUSE-SU"/>
    <description>
    The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2749/">CVE-2011-2749</cve>
	<bugzilla href="https://bugzilla.suse.com/712653">SUSE bug 712653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2766</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2766" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2766" ref_url="https://www.suse.com/security/cve/CVE-2011-2766" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0004-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0036-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00014.html" source="SUSE-SU"/>
    <description>
    The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2766/">CVE-2011-2766</cve>
	<bugzilla href="https://bugzilla.suse.com/735882">SUSE bug 735882</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486520" comment="perl-CGI-4.38-1.17 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487597" comment="FastCGI-2.4.0-2.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487598" comment="FastCGI-devel-2.4.0-2.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487599" comment="libfcgi0-2.4.0-2.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487600" comment="perl-FastCGI-2.4.0-2.23 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2895</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2895" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2895" ref_url="https://www.suse.com/security/cve/CVE-2011-2895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1035-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00004.html" source="SUSE-SU"/>
    <description>
    The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2895/">CVE-2011-2895</cve>
	<bugzilla href="https://bugzilla.suse.com/709851">SUSE bug 709851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711487">SUSE bug 711487</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480420" comment="libXfont-devel-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480967" comment="xorg-x11-devel-7.6.1-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480968" comment="xorg-x11-libs-7.6.1-1.16 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2896</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2896" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2896" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2896" ref_url="https://www.suse.com/security/cve/CVE-2011-2896" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1152-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00020.html" source="SUSE-SU"/>
    <description>
    The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2896/">CVE-2011-2896</cve>
	<bugzilla href="https://bugzilla.suse.com/601830">SUSE bug 601830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/671735">SUSE bug 671735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680210">SUSE bug 680210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680212">SUSE bug 680212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/700987">SUSE bug 700987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711490">SUSE bug 711490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711491">SUSE bug 711491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/715643">SUSE bug 715643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488900" comment="gimp-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488901" comment="gimp-devel-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488902" comment="gimp-lang-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488903" comment="gimp-plugins-python-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488904" comment="libgimp-2_0-0-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488905" comment="libgimpui-2_0-0-2.8.22-3.42 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2898</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2898" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2898" ref_url="https://www.suse.com/security/cve/CVE-2011-2898" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    net/packet/af_packet.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-2898/">CVE-2011-2898</cve>
	<bugzilla href="https://bugzilla.suse.com/710235">SUSE bug 710235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2905</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2905" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2905" ref_url="https://www.suse.com/security/cve/CVE-2011-2905" source="SUSE CVE"/>
    <description>
    Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2905/">CVE-2011-2905</cve>
	<bugzilla href="https://bugzilla.suse.com/711414">SUSE bug 711414</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112918" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2918</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2918" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2918" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2918" ref_url="https://www.suse.com/security/cve/CVE-2011-2918" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1222-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF_COUNT_SW_CPU_CLOCK events, which allows local users to cause a denial of service (system hang) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2918/">CVE-2011-2918</cve>
	<bugzilla href="https://bugzilla.suse.com/712366">SUSE bug 712366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/713650">SUSE bug 713650</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2928</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2928" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2928" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2928" ref_url="https://www.suse.com/security/cve/CVE-2011-2928" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2928/">CVE-2011-2928</cve>
	<bugzilla href="https://bugzilla.suse.com/713430">SUSE bug 713430</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112940" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2940</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2940" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2940" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2940" ref_url="https://www.suse.com/security/cve/CVE-2011-2940" source="SUSE CVE"/>
    <description>
    stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2940/">CVE-2011-2940</cve>
	<bugzilla href="https://bugzilla.suse.com/715641">SUSE bug 715641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488296" comment="stunnel-5.44-1.29 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2942</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2942" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2942" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2942" ref_url="https://www.suse.com/security/cve/CVE-2011-2942" source="SUSE CVE"/>
    <description>
    A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging connectivity to a network interface that uses an Ethernet bridge device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2942/">CVE-2011-2942</cve>
	<bugzilla href="https://bugzilla.suse.com/726064">SUSE bug 726064</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2985</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2985" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2985" ref_url="https://www.suse.com/security/cve/CVE-2011-2985" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2985/">CVE-2011-2985</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2986</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2986" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2986" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2986" ref_url="https://www.suse.com/security/cve/CVE-2011-2986" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D (aka D2D) API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2986/">CVE-2011-2986</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2987</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2987" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2987" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2987" ref_url="https://www.suse.com/security/cve/CVE-2011-2987" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Almost Native Graphics Layer Engine (ANGLE), as used in the WebGL implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products might allow remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2987/">CVE-2011-2987</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2988</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2988" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2988" ref_url="https://www.suse.com/security/cve/CVE-2011-2988" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in an unspecified string class in the WebGL shader implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long source-code block for a shader.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2988/">CVE-2011-2988</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2989</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2989" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2989" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2989" ref_url="https://www.suse.com/security/cve/CVE-2011-2989" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not properly implement WebGL, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2989/">CVE-2011-2989</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2990</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2990" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2990" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2990" ref_url="https://www.suse.com/security/cve/CVE-2011-2990" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
    <description>
    The implementation of Content Security Policy (CSP) violation reports in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not remove proxy-authorization credentials from the listed request headers, which allows attackers to obtain sensitive information by reading a report, related to incorrect host resolution that occurs with certain redirects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-31"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2990/">CVE-2011-2990</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2991</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2991" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2991" ref_url="https://www.suse.com/security/cve/CVE-2011-2991" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not properly implement JavaScript, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2991/">CVE-2011-2991</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2992</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2992" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2992" ref_url="https://www.suse.com/security/cve/CVE-2011-2992" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2992/">CVE-2011-2992</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2993</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2993" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2993" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2993" ref_url="https://www.suse.com/security/cve/CVE-2011-2993" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
    <description>
    The implementation of digital signatures for JAR files in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not prevent calls from unsigned JavaScript code to signed code, which allows remote attackers to bypass the Same Origin Policy and gain privileges via a crafted web site, a different vulnerability than CVE-2008-2801.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2993/">CVE-2011-2993</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2995</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2995" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2995" ref_url="https://www.suse.com/security/cve/CVE-2011-2995" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1079-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00030.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2995/">CVE-2011-2995</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2996</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2996" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2996" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2996" ref_url="https://www.suse.com/security/cve/CVE-2011-2996" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1079-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2996/">CVE-2011-2996</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2997</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2997" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2997" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2997" ref_url="https://www.suse.com/security/cve/CVE-2011-2997" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2997/">CVE-2011-2997</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3000</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3000" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3000" ref_url="https://www.suse.com/security/cve/CVE-2011-3000" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1079-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3000/">CVE-2011-3000</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3001</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3001" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3001" ref_url="https://www.suse.com/security/cve/CVE-2011-3001" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an unspecified internal error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3001/">CVE-2011-3001</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3002</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3002" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3002" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3002" ref_url="https://www.suse.com/security/cve/CVE-2011-3002" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
    <description>
    Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 7.0 and SeaMonkey before 2.4, does not validate the return value of a GrowAtomTable function call, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a memory-allocation error and a resulting buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3002/">CVE-2011-3002</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3003</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3003" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3003" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3003" ref_url="https://www.suse.com/security/cve/CVE-2011-3003" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unspecified WebGL test case that triggers a memory-allocation error and a resulting out-of-bounds write operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3003/">CVE-2011-3003</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3004</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3004" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3004" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3004" ref_url="https://www.suse.com/security/cve/CVE-2011-3004" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
    <description>
    The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3004/">CVE-2011-3004</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3005</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3005" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3005" ref_url="https://www.suse.com/security/cve/CVE-2011-3005" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3005/">CVE-2011-3005</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3026</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3026" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3026" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3026" ref_url="https://www.suse.com/security/cve/CVE-2011-3026" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0297-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3026/">CVE-2011-3026</cve>
	<bugzilla href="https://bugzilla.suse.com/747311">SUSE bug 747311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747327">SUSE bug 747327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747328">SUSE bug 747328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/773612">SUSE bug 773612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854395">SUSE bug 854395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3045</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3045" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3045" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3045" ref_url="https://www.suse.com/security/cve/CVE-2011-3045" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0432-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0466-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3045/">CVE-2011-3045</cve>
	<bugzilla href="https://bugzilla.suse.com/752008">SUSE bug 752008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754456">SUSE bug 754456</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3048</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3048" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3048" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3048" ref_url="https://www.suse.com/security/cve/CVE-2011-3048" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0732-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000137.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00031.html" source="SUSE-SU"/>
    <description>
    The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3048/">CVE-2011-3048</cve>
	<bugzilla href="https://bugzilla.suse.com/754745">SUSE bug 754745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854395">SUSE bug 854395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3062</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3062" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3062" ref_url="https://www.suse.com/security/cve/CVE-2011-3062" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3062/">CVE-2011-3062</cve>
	<bugzilla href="https://bugzilla.suse.com/754458">SUSE bug 754458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3079</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3079" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3079" ref_url="https://www.suse.com/security/cve/CVE-2011-3079" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0613-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3079/">CVE-2011-3079</cve>
	<bugzilla href="https://bugzilla.suse.com/1122983">SUSE bug 1122983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/760264">SUSE bug 760264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986639">SUSE bug 986639</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3101</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3101" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3101" ref_url="https://www.suse.com/security/cve/CVE-2011-3101" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0656-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which has unknown impact and attack vectors.  NOTE: see CVE-2012-3105 for the related MFSA 2012-34 issue in Mozilla products.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3101/">CVE-2011-3101</cve>
	<bugzilla href="https://bugzilla.suse.com/762481">SUSE bug 762481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3146</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3146" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3146" ref_url="https://www.suse.com/security/cve/CVE-2011-3146" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1090-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00003.html" source="SUSE-SU"/>
    <description>
    librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3146/">CVE-2011-3146</cve>
	<bugzilla href="https://bugzilla.suse.com/714980">SUSE bug 714980</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480257" comment="gdk-pixbuf-loader-rsvg-2.42.3-1.49 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480258" comment="librsvg-2-2-2.42.3-1.49 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486497" comment="librsvg-devel-2.42.3-1.49 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486498" comment="typelib-1_0-Rsvg-2_0-2.42.3-1.49 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3148</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3148" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3148" ref_url="https://www.suse.com/security/cve/CVE-2011-3148" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1218-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00005.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pam_environment file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3148/">CVE-2011-3148</cve>
	<bugzilla href="https://bugzilla.suse.com/724480">SUSE bug 724480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487778" comment="pam-devel-32bit-1.3.0-6.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481612" comment="pam-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481613" comment="pam-32bit-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481614" comment="pam-devel-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481615" comment="pam-doc-1.3.0-6.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113149" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3149</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3149" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3149" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3149" ref_url="https://www.suse.com/security/cve/CVE-2011-3149" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1218-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00005.html" source="SUSE-SU"/>
    <description>
    The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause a denial of service (CPU consumption).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-3149/">CVE-2011-3149</cve>
	<bugzilla href="https://bugzilla.suse.com/724480">SUSE bug 724480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487778" comment="pam-devel-32bit-1.3.0-6.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481612" comment="pam-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481613" comment="pam-32bit-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481614" comment="pam-devel-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481615" comment="pam-doc-1.3.0-6.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3172</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3172" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3172" ref_url="https://www.suse.com/security/cve/CVE-2011-3172" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004204.html" source="SUSE-SU"/>
    <description>
    A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled. Affected releases are SUSE Linux Enterprise: versions prior to 12.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3172/">CVE-2011-3172</cve>
	<bugzilla href="https://bugzilla.suse.com/1149683">SUSE bug 1149683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/707645">SUSE bug 707645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488036" comment="pam-modules-12.1-3.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488037" comment="pam-modules-32bit-12.1-3.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3188</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3188" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3188" ref_url="https://www.suse.com/security/cve/CVE-2011-3188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
    <description>
    The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3188/">CVE-2011-3188</cve>
	<bugzilla href="https://bugzilla.suse.com/713650">SUSE bug 713650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/737874">SUSE bug 737874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3192</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3192" ref_url="https://www.suse.com/security/cve/CVE-2011-3192" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1000-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7009308" ref_url="https://www.suse.com/support/kb/doc/?id=7009308" source="SUSE-SU"/>
		<reference ref_id="TID7009621" ref_url="https://www.suse.com/support/kb/doc/?id=7009621" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1217-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00009.html" source="SUSE-SU"/>
    <description>
    The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3192/">CVE-2011-3192</cve>
	<bugzilla href="https://bugzilla.suse.com/713966">SUSE bug 713966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/714306">SUSE bug 714306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/716634">SUSE bug 716634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/718106">SUSE bug 718106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/722545">SUSE bug 722545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/726139">SUSE bug 726139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/732051">SUSE bug 732051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983778">SUSE bug 983778</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3200</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3200" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3200" ref_url="https://www.suse.com/security/cve/CVE-2011-3200" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1020-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-09/msg00013.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service (application exit) via a long TAG in a legacy syslog message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3200/">CVE-2011-3200</cve>
	<bugzilla href="https://bugzilla.suse.com/714658">SUSE bug 714658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481653" comment="rsyslog-8.33.1-3.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488431" comment="rsyslog-module-gssapi-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488432" comment="rsyslog-module-gtls-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488433" comment="rsyslog-module-mysql-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488434" comment="rsyslog-module-pgsql-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488435" comment="rsyslog-module-relp-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488436" comment="rsyslog-module-snmp-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488437" comment="rsyslog-module-udpspoof-8.33.1-3.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3207</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3207" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3207" ref_url="https://www.suse.com/security/cve/CVE-2011-3207" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1144-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00018.html" source="SUSE-SU"/>
    <description>
    crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3207/">CVE-2011-3207</cve>
	<bugzilla href="https://bugzilla.suse.com/716143">SUSE bug 716143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3210</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3210" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3210" ref_url="https://www.suse.com/security/cve/CVE-2011-3210" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1144-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00018.html" source="SUSE-SU"/>
    <description>
    The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3210/">CVE-2011-3210</cve>
	<bugzilla href="https://bugzilla.suse.com/716144">SUSE bug 716144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3232</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3232" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3232" ref_url="https://www.suse.com/security/cve/CVE-2011-3232" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3232/">CVE-2011-3232</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3256</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3256" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3256" ref_url="https://www.suse.com/security/cve/CVE-2011-3256" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1307-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0047-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00012.html" source="SUSE-SU"/>
    <description>
    FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3256/">CVE-2011-3256</cve>
	<bugzilla href="https://bugzilla.suse.com/728044">SUSE bug 728044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/730124">SUSE bug 730124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/748083">SUSE bug 748083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3328</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3328" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3328" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3328" ref_url="https://www.suse.com/security/cve/CVE-2011-3328" source="SUSE CVE"/>
    <description>
    The png_handle_cHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a malformed PNG image containing a cHRM chunk associated with a certain zero value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-3328/">CVE-2011-3328</cve>
	<bugzilla href="https://bugzilla.suse.com/720017">SUSE bug 720017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113359" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3359</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3359" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3359" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3359" ref_url="https://www.suse.com/security/cve/CVE-2011-3359" source="SUSE CVE"/>
    <description>
    The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-3359/">CVE-2011-3359</cve>
	<bugzilla href="https://bugzilla.suse.com/717749">SUSE bug 717749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3363</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3363" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3363" ref_url="https://www.suse.com/security/cve/CVE-2011-3363" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:042" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1222-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-3363/">CVE-2011-3363</cve>
	<bugzilla href="https://bugzilla.suse.com/718028">SUSE bug 718028</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3368</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3368" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3368" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3368" ref_url="https://www.suse.com/security/cve/CVE-2011-3368" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0248-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0243-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00065.html" source="SUSE-SU"/>
    <description>
    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3368/">CVE-2011-3368</cve>
	<bugzilla href="https://bugzilla.suse.com/722545">SUSE bug 722545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/723308">SUSE bug 723308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/728876">SUSE bug 728876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/729181">SUSE bug 729181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754831">SUSE bug 754831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791794">SUSE bug 791794</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3389</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3389" ref_url="https://www.suse.com/security/cve/CVE-2011-3389" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0114-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0114-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0122-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7001524" ref_url="https://www.suse.com/support/kb/doc/?id=7001524" source="SUSE-SU"/>
		<reference ref_id="TID7009901" ref_url="https://www.suse.com/support/kb/doc/?id=7009901" source="SUSE-SU"/>
		<reference ref_id="TID7015841" ref_url="https://www.suse.com/support/kb/doc/?id=7015841" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7022397" ref_url="https://www.suse.com/support/kb/doc/?id=7022397" source="SUSE-SU"/>
		<reference ref_id="TID7022454" ref_url="https://www.suse.com/support/kb/doc/?id=7022454" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1025-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0063-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0667-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-3389/">CVE-2011-3389</cve>
	<bugzilla href="https://bugzilla.suse.com/716002">SUSE bug 716002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/719047">SUSE bug 719047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725167">SUSE bug 725167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/726096">SUSE bug 726096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/739248">SUSE bug 739248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/739256">SUSE bug 739256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742306">SUSE bug 742306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751718">SUSE bug 751718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/759666">SUSE bug 759666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/763598">SUSE bug 763598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/814655">SUSE bug 814655</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334160" comment="python3 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334160" comment="python3 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336374" comment="python3-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336375" comment="python3-dbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337943" comment="python3-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337944" comment="python3-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480228" comment="fetchmail-6.3.26-3.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482674" comment="fetchmailconf-6.3.26-3.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3439</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3439" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3439" ref_url="https://www.suse.com/security/cve/CVE-2011-3439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1307-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0047-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00012.html" source="SUSE-SU"/>
    <description>
    FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3439/">CVE-2011-3439</cve>
	<bugzilla href="https://bugzilla.suse.com/730124">SUSE bug 730124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/748083">SUSE bug 748083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3581</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3581" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3581" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3581" ref_url="https://www.suse.com/security/cve/CVE-2011-3581" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00008.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3581/">CVE-2011-3581</cve>
	<bugzilla href="https://bugzilla.suse.com/720277">SUSE bug 720277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487698" comment="perl-DNS-LDNS-1.7.0-2.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480351" comment="ldns-devel-1.7.0-2.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480352" comment="libldns2-1.7.0-2.22 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3585</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3585" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3585" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3585" ref_url="https://www.suse.com/security/cve/CVE-2011-3585" source="SUSE CVE"/>
    <description>
    Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-13"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-3585/">CVE-2011-3585</cve>
	<bugzilla href="https://bugzilla.suse.com/1160791">SUSE bug 1160791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/721973">SUSE bug 721973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336017" comment="ctdb is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337885" comment="samba-ceph is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334838" comment="libdcerpc-binding0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334951" comment="libdcerpc-binding0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334980" comment="libdcerpc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334981" comment="libdcerpc-samr-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334982" comment="libdcerpc-samr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334839" comment="libdcerpc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334952" comment="libdcerpc0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334984" comment="libndr-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334985" comment="libndr-krb5pac-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334840" comment="libndr-krb5pac0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334954" comment="libndr-krb5pac0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334986" comment="libndr-nbt-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334841" comment="libndr-nbt0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334955" comment="libndr-nbt0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334987" comment="libndr-standard-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334842" comment="libndr-standard0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334956" comment="libndr-standard0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334843" comment="libndr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334957" comment="libndr0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334988" comment="libnetapi-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334844" comment="libnetapi0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334958" comment="libnetapi0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334991" comment="libsamba-credentials-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334845" comment="libsamba-credentials0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334960" comment="libsamba-credentials0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341004" comment="libsamba-errors-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334846" comment="libsamba-errors0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335571" comment="libsamba-errors0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334992" comment="libsamba-hostconfig-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334847" comment="libsamba-hostconfig0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334961" comment="libsamba-hostconfig0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334989" comment="libsamba-passdb-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334848" comment="libsamba-passdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334959" comment="libsamba-passdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334993" comment="libsamba-policy-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341005" comment="libsamba-policy-python3-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341006" comment="libsamba-policy0-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334995" comment="libsamba-util-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334849" comment="libsamba-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334962" comment="libsamba-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334996" comment="libsamdb-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334850" comment="libsamdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334963" comment="libsamdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334997" comment="libsmbclient-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334851" comment="libsmbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334999" comment="libsmbconf-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334852" comment="libsmbconf0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334966" comment="libsmbconf0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335000" comment="libsmbldap-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338826" comment="libsmbldap2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338827" comment="libsmbldap2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335003" comment="libtevent-util-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334854" comment="libtevent-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334968" comment="libtevent-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335004" comment="libwbclient-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334855" comment="libwbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334969" comment="libwbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335005" comment="samba-core-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338828" comment="samba-libs-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341011" comment="samba-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334973" comment="samba-winbind-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334994" comment="libsamba-policy0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341007" comment="samba-ad-dc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341008" comment="samba-dsdb-modules is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341009" comment="samba-libs-python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341010" comment="samba-python is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3593</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3593" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3593" ref_url="https://www.suse.com/security/cve/CVE-2011-3593" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    A certain Red Hat patch to the vlan_hwaccel_do_receive function in net/8021q/vlan_core.c in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows remote attackers to cause a denial of service (system crash) via priority-tagged VLAN frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3593/">CVE-2011-3593</cve>
	<bugzilla href="https://bugzilla.suse.com/735347">SUSE bug 735347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3594</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3594" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3594" ref_url="https://www.suse.com/security/cve/CVE-2011-3594" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1291-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-12/msg00001.html" source="SUSE-SU"/>
    <description>
    The g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service (crash) via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, related to interactions with certain versions of glib2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3594/">CVE-2011-3594</cve>
	<bugzilla href="https://bugzilla.suse.com/722199">SUSE bug 722199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/736161">SUSE bug 736161</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3602</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3602" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3602" ref_url="https://www.suse.com/security/cve/CVE-2011-3602" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3602/">CVE-2011-3602</cve>
	<bugzilla href="https://bugzilla.suse.com/721968">SUSE bug 721968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480917" comment="radvd-2.17-3.18 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3607</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3607" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3607" ref_url="https://www.suse.com/security/cve/CVE-2011-3607" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0248-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00044.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3607/">CVE-2011-3607</cve>
	<bugzilla href="https://bugzilla.suse.com/728876">SUSE bug 728876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/729181">SUSE bug 729181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/729183">SUSE bug 729183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806721">SUSE bug 806721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3616</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3616" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3616" ref_url="https://www.suse.com/security/cve/CVE-2011-3616" source="SUSE CVE"/>
    <description>
    The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on /tmp/.cesf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-3616/">CVE-2011-3616</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482651" comment="conky-1.10.6-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482652" comment="conky-doc-1.10.6-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482653" comment="vim-plugin-conky-1.10.6-1.46 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3627</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3627" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3627" ref_url="https://www.suse.com/security/cve/CVE-2011-3627" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1177-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00030.html" source="SUSE-SU"/>
    <description>
    The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3627/">CVE-2011-3627</cve>
	<bugzilla href="https://bugzilla.suse.com/724856">SUSE bug 724856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/809945">SUSE bug 809945</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3630</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3630" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3630" ref_url="https://www.suse.com/security/cve/CVE-2011-3630" source="SUSE CVE"/>
    <description>
    Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink executable crash, or, potentially arbitrary code execution with the privileges of the user running the hardlink executable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3630/">CVE-2011-3630</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480325" comment="hardlink-1.0+git.e66999f-1.25 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3631</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3631" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3631" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3631" ref_url="https://www.suse.com/security/cve/CVE-2011-3631" source="SUSE CVE"/>
    <description>
    Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree and trick the local user into consolidating it, leading to hardlink executable crash or potentially arbitrary code execution with user privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3631/">CVE-2011-3631</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480325" comment="hardlink-1.0+git.e66999f-1.25 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3632</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3632" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3632" ref_url="https://www.suse.com/security/cve/CVE-2011-3632" source="SUSE CVE"/>
    <description>
    Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-3632/">CVE-2011-3632</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480325" comment="hardlink-1.0+git.e66999f-1.25 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3638</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3638" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3638" ref_url="https://www.suse.com/security/cve/CVE-2011-3638" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    fs/ext4/extents.c in the Linux kernel before 3.0 does not mark a modified extent as dirty in certain cases of extent splitting, which allows local users to cause a denial of service (system crash) via vectors involving ext4 umount and mount operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-3638/">CVE-2011-3638</cve>
	<bugzilla href="https://bugzilla.suse.com/726045">SUSE bug 726045</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3640</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3640" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3640" ref_url="https://www.suse.com/security/cve/CVE-2011-3640" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1241-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0063-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00021.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but we're not treating this as a security bug."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-19"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3640/">CVE-2011-3640</cve>
	<bugzilla href="https://bugzilla.suse.com/726096">SUSE bug 726096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3648</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3648" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3648" ref_url="https://www.suse.com/security/cve/CVE-2011-3648" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 allows remote attackers to inject arbitrary web script or HTML via crafted text with Shift JIS encoding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3648/">CVE-2011-3648</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3650</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3650" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3650" ref_url="https://www.suse.com/security/cve/CVE-2011-3650" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3650/">CVE-2011-3650</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3651</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3651" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3651" ref_url="https://www.suse.com/security/cve/CVE-2011-3651" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3651/">CVE-2011-3651</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3652</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3652" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3652" ref_url="https://www.suse.com/security/cve/CVE-2011-3652" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3652/">CVE-2011-3652</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3654</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3654" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3654" ref_url="https://www.suse.com/security/cve/CVE-2011-3654" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly handle links from SVG mpath elements to non-SVG elements, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3654/">CVE-2011-3654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3655</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3655" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3655" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3655" ref_url="https://www.suse.com/security/cve/CVE-2011-3655" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3655/">CVE-2011-3655</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3658</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3658" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3658" ref_url="https://www.suse.com/security/cve/CVE-2011-3658" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via vectors involving removal of SVG elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3658/">CVE-2011-3658</cve>
	<bugzilla href="https://bugzilla.suse.com/737533">SUSE bug 737533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3659</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3659" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3659" ref_url="https://www.suse.com/security/cve/CVE-2011-3659" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3659/">CVE-2011-3659</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3660</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3660" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3660" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3660" ref_url="https://www.suse.com/security/cve/CVE-2011-3660" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger a compartment mismatch associated with the nsDOMMessageEvent::GetData function, and unknown other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3660/">CVE-2011-3660</cve>
	<bugzilla href="https://bugzilla.suse.com/737533">SUSE bug 737533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3661</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3661" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3661" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3661" ref_url="https://www.suse.com/security/cve/CVE-2011-3661" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    YARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3661/">CVE-2011-3661</cve>
	<bugzilla href="https://bugzilla.suse.com/737533">SUSE bug 737533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3663</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3663" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3663" ref_url="https://www.suse.com/security/cve/CVE-2011-3663" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to capture keystrokes entered on a web page, even when JavaScript is disabled, by using SVG animation accessKey events within that web page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3663/">CVE-2011-3663</cve>
	<bugzilla href="https://bugzilla.suse.com/737533">SUSE bug 737533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4077</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4077" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4077" ref_url="https://www.suse.com/security/cve/CVE-2011-4077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0540-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4077/">CVE-2011-4077</cve>
	<bugzilla href="https://bugzilla.suse.com/726600">SUSE bug 726600</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4080</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4080" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4080" ref_url="https://www.suse.com/security/cve/CVE-2011-4080" source="SUSE CVE"/>
    <description>
    The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-4080/">CVE-2011-4080</cve>
	<bugzilla href="https://bugzilla.suse.com/726772">SUSE bug 726772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4081</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4081" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4081" ref_url="https://www.suse.com/security/cve/CVE-2011-4081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-4081/">CVE-2011-4081</cve>
	<bugzilla href="https://bugzilla.suse.com/726788">SUSE bug 726788</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4086</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4086" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4086" ref_url="https://www.suse.com/security/cve/CVE-2011-4086" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0540-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _Unwritten buffer head states, which allows local users to cause a denial of service (system crash) by leveraging the presence of an ext4 filesystem that was mounted with a journal.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4086/">CVE-2011-4086</cve>
	<bugzilla href="https://bugzilla.suse.com/745832">SUSE bug 745832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4108</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4108" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4108" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4108" ref_url="https://www.suse.com/security/cve/CVE-2011-4108" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4108/">CVE-2011-4108</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742821">SUSE bug 742821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/778825">SUSE bug 778825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4110</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4110" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4110" ref_url="https://www.suse.com/security/cve/CVE-2011-4110" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4110/">CVE-2011-4110</cve>
	<bugzilla href="https://bugzilla.suse.com/734056">SUSE bug 734056</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4131</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4131" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4131" ref_url="https://www.suse.com/security/cve/CVE-2011-4131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4131/">CVE-2011-4131</cve>
	<bugzilla href="https://bugzilla.suse.com/730117">SUSE bug 730117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/762992">SUSE bug 762992</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4132</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4132" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4132" ref_url="https://www.suse.com/security/cve/CVE-2011-4132" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
    <description>
    The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and kernel oops) via an ext3 or ext4 image with an "invalid log first block value."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-4132/">CVE-2011-4132</cve>
	<bugzilla href="https://bugzilla.suse.com/730118">SUSE bug 730118</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4313</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4313" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4313" ref_url="https://www.suse.com/security/cve/CVE-2011-4313" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1270-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1270-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00029.html" source="SUSE-SU"/>
    <description>
    query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4313/">CVE-2011-4313</cve>
	<bugzilla href="https://bugzilla.suse.com/730995">SUSE bug 730995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/738156">SUSE bug 738156</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4317</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4317" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4317" ref_url="https://www.suse.com/security/cve/CVE-2011-4317" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0248-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0243-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html" source="SUSE-SU"/>
    <description>
    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4317/">CVE-2011-4317</cve>
	<bugzilla href="https://bugzilla.suse.com/722545">SUSE bug 722545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/728876">SUSE bug 728876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/729181">SUSE bug 729181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791794">SUSE bug 791794</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4324</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4324" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4324" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4324" ref_url="https://www.suse.com/security/cve/CVE-2011-4324" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
    <description>
    The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel before 2.6.29 allows local users to cause a denial of service (BUG and system crash) by using the mknod system call with a pathname on an NFSv4 filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4324/">CVE-2011-4324</cve>
	<bugzilla href="https://bugzilla.suse.com/732613">SUSE bug 732613</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114326" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4326</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4326" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4326" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4326" ref_url="https://www.suse.com/security/cve/CVE-2011-4326" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4326/">CVE-2011-4326</cve>
	<bugzilla href="https://bugzilla.suse.com/732021">SUSE bug 732021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4330</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4330" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4330" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4330" ref_url="https://www.suse.com/security/cve/CVE-2011-4330" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the hfs_mac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via an HFS image with a crafted len field.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4330/">CVE-2011-4330</cve>
	<bugzilla href="https://bugzilla.suse.com/731673">SUSE bug 731673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941447">SUSE bug 941447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4348</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4348" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4348" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4348" ref_url="https://www.suse.com/security/cve/CVE-2011-4348" source="SUSE CVE"/>
    <description>
    Race condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel before 2.6.29 allows remote attackers to cause a denial of service (system hang) via SCTP packets. NOTE: in some environments, this issue exists because of an incomplete fix for CVE-2011-2482.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4348/">CVE-2011-4348</cve>
	<bugzilla href="https://bugzilla.suse.com/750395">SUSE bug 750395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4349</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4349" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4349" ref_url="https://www.suse.com/security/cve/CVE-2011-4349" source="SUSE CVE"/>
    <description>
    Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4349/">CVE-2011-4349</cve>
	<bugzilla href="https://bugzilla.suse.com/698250">SUSE bug 698250</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/732996">SUSE bug 732996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480474" comment="libcolord2-1.4.2-1.37 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482643" comment="colord-color-profiles-1.4.2-1.37 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482644" comment="libcolord-devel-1.4.2-1.37 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482645" comment="libcolord-gtk-devel-0.1.26-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482646" comment="libcolord-gtk1-0.1.26-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482647" comment="libcolorhug2-1.4.2-1.37 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482648" comment="typelib-1_0-Colord-1_0-1.4.2-1.37 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482649" comment="typelib-1_0-ColordGtk-1_0-0.1.26-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482650" comment="typelib-1_0-Colorhug-1_0-1.4.2-1.37 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488884" comment="colord-1.4.2-1.37 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488885" comment="colord-gtk-lang-0.1.26-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488886" comment="colord-lang-1.4.2-1.37 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4355</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4355" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4355" ref_url="https://www.suse.com/security/cve/CVE-2011-4355" source="SUSE CVE"/>
    <description>
    GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4355/">CVE-2011-4355</cve>
	<bugzilla href="https://bugzilla.suse.com/733300">SUSE bug 733300</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009654019" comment="gdb is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654020" comment="gdbserver is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4405</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4405" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4405" ref_url="https://www.suse.com/security/cve/CVE-2011-4405" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1331-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1331-2" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00028.html" source="SUSE-SU"/>
    <description>
    The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4405/">CVE-2011-4405</cve>
	<bugzilla href="https://bugzilla.suse.com/733542">SUSE bug 733542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/735322">SUSE bug 735322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486538" comment="python3-cupshelpers-1.5.7-6.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486539" comment="system-config-printer-common-1.5.7-6.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486540" comment="system-config-printer-common-lang-1.5.7-6.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486541" comment="system-config-printer-dbus-service-1.5.7-6.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486542" comment="udev-configure-printer-1.5.7-6.27 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4516</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4516" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4516" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4516" ref_url="https://www.suse.com/security/cve/CVE-2011-4516" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1317-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1317-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4516/">CVE-2011-4516</cve>
	<bugzilla href="https://bugzilla.suse.com/1006591">SUSE bug 1006591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725758">SUSE bug 725758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4517</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4517" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4517" ref_url="https://www.suse.com/security/cve/CVE-2011-4517" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1317-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1317-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4517/">CVE-2011-4517</cve>
	<bugzilla href="https://bugzilla.suse.com/1006593">SUSE bug 1006593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725758">SUSE bug 725758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4539</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4539" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4539" ref_url="https://www.suse.com/security/cve/CVE-2011-4539" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1318-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-12/msg00006.html" source="SUSE-SU"/>
    <description>
    dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4539/">CVE-2011-4539</cve>
	<bugzilla href="https://bugzilla.suse.com/735610">SUSE bug 735610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/741239">SUSE bug 741239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4576</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4576" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4576" ref_url="https://www.suse.com/security/cve/CVE-2011-4576" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021400" ref_url="https://www.suse.com/support/kb/doc/?id=7021400" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021736" ref_url="https://www.suse.com/support/kb/doc/?id=7021736" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021991" ref_url="https://www.suse.com/support/kb/doc/?id=7021991" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4576/">CVE-2011-4576</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/778825">SUSE bug 778825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4577</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4577" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4577" ref_url="https://www.suse.com/security/cve/CVE-2011-4577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4577/">CVE-2011-4577</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4594</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4594" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4594" ref_url="https://www.suse.com/security/cve/CVE-2011-4594" source="SUSE CVE"/>
    <description>
    The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call, leading to an incorrect pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-4594/">CVE-2011-4594</cve>
	<bugzilla href="https://bugzilla.suse.com/735810">SUSE bug 735810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114604" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4604</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4604" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4604" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4604" ref_url="https://www.suse.com/security/cve/CVE-2011-4604" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The bat_socket_read function in net/batman-adv/icmp_socket.c in the Linux kernel before 3.3 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted batman-adv ICMP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4604/">CVE-2011-4604</cve>
	<bugzilla href="https://bugzilla.suse.com/736149">SUSE bug 736149</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4611</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4611" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4611" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4611" ref_url="https://www.suse.com/security/cve/CVE-2011-4611" source="SUSE CVE"/>
    <description>
    Integer overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service (unhandled performance monitor exception) via vectors that trigger certain outcomes of performance events.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4611/">CVE-2011-4611</cve>
	<bugzilla href="https://bugzilla.suse.com/744023">SUSE bug 744023</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4619</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4619" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4619" ref_url="https://www.suse.com/security/cve/CVE-2011-4619" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4619/">CVE-2011-4619</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/799454">SUSE bug 799454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4868</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4868" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4868" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4868" ref_url="https://www.suse.com/security/cve/CVE-2011-4868" source="SUSE CVE"/>
    <description>
    The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4868/">CVE-2011-4868</cve>
	<bugzilla href="https://bugzilla.suse.com/741239">SUSE bug 741239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114915" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4915</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4915" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4915" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4915" ref_url="https://www.suse.com/security/cve/CVE-2011-4915" source="SUSE CVE"/>
    <description>
    fs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /proc/interrupts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-4915/">CVE-2011-4915</cve>
	<bugzilla href="https://bugzilla.suse.com/738749">SUSE bug 738749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4944</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4944" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4944" ref_url="https://www.suse.com/security/cve/CVE-2011-4944" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0667-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-4944/">CVE-2011-4944</cve>
	<bugzilla href="https://bugzilla.suse.com/754447">SUSE bug 754447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334160" comment="python3 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336374" comment="python3-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336375" comment="python3-dbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337943" comment="python3-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337944" comment="python3-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114968" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4968</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4968" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4968" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4968" ref_url="https://www.suse.com/security/cve/CVE-2011-4968" source="SUSE CVE"/>
    <description>
    nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2011-4968/">CVE-2011-4968</cve>
	<bugzilla href="https://bugzilla.suse.com/797033">SUSE bug 797033</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009348227" comment="nginx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009477760" comment="nginx-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4971</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4971" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4971" ref_url="https://www.suse.com/security/cve/CVE-2011-4971" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0951-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00041.html" source="SUSE-SU"/>
    <description>
    Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-4971/">CVE-2011-4971</cve>
	<bugzilla href="https://bugzilla.suse.com/817781">SUSE bug 817781</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488250" comment="memcached-1.5.6-2.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488251" comment="memcached-devel-1.5.6-2.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20115321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-5321</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-5321" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5321" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-5321" ref_url="https://www.suse.com/security/cve/CVE-2011-5321" source="SUSE CVE"/>
    <description>
    The tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted access to a device file under the /dev/pts directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-01"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-5321/">CVE-2011-5321</cve>
	<bugzilla href="https://bugzilla.suse.com/922447">SUSE bug 922447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20115325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-5325</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-5325" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5325" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-5325" ref_url="https://www.suse.com/security/cve/CVE-2011-5325" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LTZHQ6OAWXY23IUCNO7X25C5CHHCWLOM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3531-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EXGVAQ34C33F4R3O65TKB73FYUDCIM6B/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-5325/">CVE-2011-5325</cve>
	<bugzilla href="https://bugzilla.suse.com/951562">SUSE bug 951562</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663736" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663741" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663750" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663751" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663766" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663767" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20115327" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-5327</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-5327" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5327" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-5327" ref_url="https://www.suse.com/security/cve/CVE-2011-5327" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 3.1, an off by one in the drivers/target/loopback/tcm_loop.c tcm_loop_make_naa_tpg() function could result in at least memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-5327/">CVE-2011-5327</cve>
	<bugzilla href="https://bugzilla.suse.com/1143175">SUSE bug 1143175</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0021</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0021" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0021" ref_url="https://www.suse.com/security/cve/CVE-2012-0021" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000464.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003365.html" source="SUSE-SU"/>
    <description>
    The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0021/">CVE-2012-0021</cve>
	<bugzilla href="https://bugzilla.suse.com/1078450">SUSE bug 1078450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/743744">SUSE bug 743744</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120027" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0027</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0027" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0027" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0027" ref_url="https://www.suse.com/security/cve/CVE-2012-0027" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0027/">CVE-2012-0027</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0028</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0028" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0028" ref_url="https://www.suse.com/security/cve/CVE-2012-0028" source="SUSE CVE"/>
    <description>
    The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0028/">CVE-2012-0028</cve>
	<bugzilla href="https://bugzilla.suse.com/739721">SUSE bug 739721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0031</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0031" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0031" ref_url="https://www.suse.com/security/cve/CVE-2012-0031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0284-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html" source="SUSE-SU"/>
    <description>
    scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0031/">CVE-2012-0031</cve>
	<bugzilla href="https://bugzilla.suse.com/741243">SUSE bug 741243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806721">SUSE bug 806721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0035</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0035" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0035" ref_url="https://www.suse.com/security/cve/CVE-2012-0035" source="SUSE CVE"/>
    <description>
    Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0035/">CVE-2012-0035</cve>
	<bugzilla href="https://bugzilla.suse.com/740447">SUSE bug 740447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486596" comment="emacs-x11-25.3-3.3.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481111" comment="emacs-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481112" comment="emacs-el-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481113" comment="emacs-info-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481114" comment="emacs-nox-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481115" comment="etags-25.3-3.3.18 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0037</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0037" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0037" ref_url="https://www.suse.com/security/cve/CVE-2012-0037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-March/000062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0428-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0433-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00052.html" source="SUSE-SU"/>
    <description>
    Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0037/">CVE-2012-0037</cve>
	<bugzilla href="https://bugzilla.suse.com/37195">SUSE bug 37195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/734781">SUSE bug 734781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/740453">SUSE bug 740453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/745298">SUSE bug 745298</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486494" comment="libraptor-devel-2.0.15-1.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486495" comment="libraptor2-0-2.0.15-1.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486496" comment="raptor-2.0.15-1.42 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0045</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0045" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0045" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0045" ref_url="https://www.suse.com/security/cve/CVE-2012-0045" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application, as demonstrated by an NASM file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0045/">CVE-2012-0045</cve>
	<bugzilla href="https://bugzilla.suse.com/740969">SUSE bug 740969</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0050</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0050" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0050" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0050" ref_url="https://www.suse.com/security/cve/CVE-2012-0050" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0266-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0050/">CVE-2012-0050</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742821">SUSE bug 742821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0053</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0053" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0053" ref_url="https://www.suse.com/security/cve/CVE-2012-0053" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0284-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html" source="SUSE-SU"/>
    <description>
    protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0053/">CVE-2012-0053</cve>
	<bugzilla href="https://bugzilla.suse.com/743743">SUSE bug 743743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0055</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0055" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0055" ref_url="https://www.suse.com/security/cve/CVE-2012-0055" source="SUSE CVE"/>
    <description>
    OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-0055/">CVE-2012-0055</cve>
	<bugzilla href="https://bugzilla.suse.com/742027">SUSE bug 742027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0056</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0056" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0056" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0056" ref_url="https://www.suse.com/security/cve/CVE-2012-0056" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/&lt;pid&gt;/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-05"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0056/">CVE-2012-0056</cve>
	<bugzilla href="https://bugzilla.suse.com/1171985">SUSE bug 1171985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742028">SUSE bug 742028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742279">SUSE bug 742279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120058" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0058</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0058" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0058" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0058" ref_url="https://www.suse.com/security/cve/CVE-2012-0058" source="SUSE CVE"/>
    <description>
    The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vectors that trigger incorrect iocb management.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-10"/>
	<updated date="2023-07-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-0058/">CVE-2012-0058</cve>
	<bugzilla href="https://bugzilla.suse.com/742030">SUSE bug 742030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0441</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0441" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0441" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0441" ref_url="https://www.suse.com/security/cve/CVE-2012-0441" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a denial of service (application crash) via a zero-length item, as demonstrated by (1) a zero-length basic constraint or (2) a zero-length field in an OCSP response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0441/">CVE-2012-0441</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0442</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0442" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0442" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0442" ref_url="https://www.suse.com/security/cve/CVE-2012-0442" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0198-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0221-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0442/">CVE-2012-0442</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0443</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0443" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0443" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0443" ref_url="https://www.suse.com/security/cve/CVE-2012-0443" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0443/">CVE-2012-0443</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0444</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0444" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0444" ref_url="https://www.suse.com/security/cve/CVE-2012-0444" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0444/">CVE-2012-0444</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747912">SUSE bug 747912</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481532" comment="libvorbis-devel-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0445</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0445" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0445" ref_url="https://www.suse.com/security/cve/CVE-2012-0445" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating a form submission target with a sub-frame's name attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0445/">CVE-2012-0445</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0446</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0446" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0446" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0446" ref_url="https://www.suse.com/security/cve/CVE-2012-0446" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or HTML via a (1) web page or (2) Firefox extension, related to improper enforcement of XPConnect security restrictions for frame scripts that call untrusted objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0446/">CVE-2012-0446</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0447</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0447" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0447" ref_url="https://www.suse.com/security/cve/CVE-2012-0447" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0447/">CVE-2012-0447</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0449</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0449" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0449" ref_url="https://www.suse.com/security/cve/CVE-2012-0449" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0449/">CVE-2012-0449</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0451</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0451" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0451" ref_url="https://www.suse.com/security/cve/CVE-2012-0451" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0451/">CVE-2012-0451</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0452</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0452" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0452" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0452" ref_url="https://www.suse.com/security/cve/CVE-2012-0452" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger failure of an nsXBLDocumentInfo::ReadPrototypeBindings function call, related to the cycle collector's access to a hash table containing a stale XBL binding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0452/">CVE-2012-0452</cve>
	<bugzilla href="https://bugzilla.suse.com/746616">SUSE bug 746616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746663">SUSE bug 746663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120455" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0455</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0455" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0455" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0455" ref_url="https://www.suse.com/security/cve/CVE-2012-0455" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web page, related to a "DragAndDropJacking" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0455/">CVE-2012-0455</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0456</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0456" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0456" ref_url="https://www.suse.com/security/cve/CVE-2012-0456" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0456/">CVE-2012-0456</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120457" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0457</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0457" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0457" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0457" ref_url="https://www.suse.com/security/cve/CVE-2012-0457" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0457/">CVE-2012-0457</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0458</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0458" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0458" ref_url="https://www.suse.com/security/cve/CVE-2012-0458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0458/">CVE-2012-0458</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0459</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0459" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0459" ref_url="https://www.suse.com/security/cve/CVE-2012-0459" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via dynamic modification of a keyframe followed by access to the cssText of the keyframe.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0459/">CVE-2012-0459</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0460</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0460" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0460" ref_url="https://www.suse.com/security/cve/CVE-2012-0460" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0460/">CVE-2012-0460</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0461</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0461" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0461" ref_url="https://www.suse.com/security/cve/CVE-2012-0461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0461/">CVE-2012-0461</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0462</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0462" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0462" ref_url="https://www.suse.com/security/cve/CVE-2012-0462" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0462/">CVE-2012-0462</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0463</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0463" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0463" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0463" ref_url="https://www.suse.com/security/cve/CVE-2012-0463" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 does not check the validity of an instance after event dispatching, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, as demonstrated by Mobile Firefox on Android.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0463/">CVE-2012-0463</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0464</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0464" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0464" ref_url="https://www.suse.com/security/cve/CVE-2012-0464" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0464/">CVE-2012-0464</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0467</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0467" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0467" ref_url="https://www.suse.com/security/cve/CVE-2012-0467" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0467/">CVE-2012-0467</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0468</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0468" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0468" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0468" ref_url="https://www.suse.com/security/cve/CVE-2012-0468" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (assertion failure and memory corruption) or possibly execute arbitrary code via vectors related to jsval.h and the js::array_shift function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0468/">CVE-2012-0468</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0469</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0469" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0469" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0469" ref_url="https://www.suse.com/security/cve/CVE-2012-0469" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to execute arbitrary code via vectors related to crafted IndexedDB data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0469/">CVE-2012-0469</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0470</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0470" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0470" ref_url="https://www.suse.com/security/cve/CVE-2012-0470" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (invalid gfxImageSurface free operation) or possibly execute arbitrary code by leveraging the use of "different number systems."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0470/">CVE-2012-0470</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0471</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0471" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0471" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0471" ref_url="https://www.suse.com/security/cve/CVE-2012-0471" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via a multibyte character set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0471/">CVE-2012-0471</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0472</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0472" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0472" ref_url="https://www.suse.com/security/cve/CVE-2012-0472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9, when certain Windows Vista and Windows 7 configurations are used, does not properly restrict font-rendering attempts, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0472/">CVE-2012-0472</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0473</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0473" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0473" ref_url="https://www.suse.com/security/cve/CVE-2012-0473" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 calls the FindMaxElementInSubArray function with incorrect template arguments, which allows remote attackers to obtain sensitive information from video memory via a crafted WebGL.drawElements call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0473/">CVE-2012-0473</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0474</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0474" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0474" ref_url="https://www.suse.com/security/cve/CVE-2012-0474" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via vectors related to short-circuited page loads, aka "Universal XSS (UXSS)."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0474/">CVE-2012-0474</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0475</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0475" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0475" ref_url="https://www.suse.com/security/cve/CVE-2012-0475" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not properly construct the Origin and Sec-WebSocket-Origin HTTP headers, which might allow remote attackers to bypass an IPv6 literal ACL via a cross-site (1) XMLHttpRequest or (2) WebSocket operation involving a nonstandard port number and an IPv6 address that contains certain zero fields.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0475/">CVE-2012-0475</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0477</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0477" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0477" ref_url="https://www.suse.com/security/cve/CVE-2012-0477" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) ISO-2022-KR or (2) ISO-2022-CN character set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0477/">CVE-2012-0477</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0478</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0478" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0478" ref_url="https://www.suse.com/security/cve/CVE-2012-0478" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 does not properly restrict JSVAL_TO_OBJECT casts, which might allow remote attackers to execute arbitrary code via a crafted web page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0478/">CVE-2012-0478</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0479</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0479" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0479" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0479" ref_url="https://www.suse.com/security/cve/CVE-2012-0479" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid (1) RSS or (2) Atom XML content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0479/">CVE-2012-0479</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0759</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0759" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0759" ref_url="https://www.suse.com/security/cve/CVE-2012-0759" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0771.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0759/">CVE-2012-0759</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0786</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0786" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0786" ref_url="https://www.suse.com/security/cve/CVE-2012-0786" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000961.html" source="SUSE-SU"/>
    <description>
    The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-0786/">CVE-2012-0786</cve>
	<bugzilla href="https://bugzilla.suse.com/853044">SUSE bug 853044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885003">SUSE bug 885003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480071" comment="augeas-1.10.1-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480072" comment="augeas-devel-1.10.1-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480073" comment="augeas-lenses-1.10.1-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480074" comment="libaugeas0-1.10.1-1.11 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0804</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0804" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0804" ref_url="https://www.suse.com/security/cve/CVE-2012-0804" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0310-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00064.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0804/">CVE-2012-0804</cve>
	<bugzilla href="https://bugzilla.suse.com/744059">SUSE bug 744059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487632" comment="cvs-1.12.12-2.30 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0810</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0810" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0810" ref_url="https://www.suse.com/security/cve/CVE-2012-0810" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
    <description>
    The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corruption and panic) via a crafted application that triggers certain lock contention.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-0810/">CVE-2012-0810</cve>
	<bugzilla href="https://bugzilla.suse.com/749118">SUSE bug 749118</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0845</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0845" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0845" ref_url="https://www.suse.com/security/cve/CVE-2012-0845" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0667-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-0845/">CVE-2012-0845</cve>
	<bugzilla href="https://bugzilla.suse.com/747125">SUSE bug 747125</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334160" comment="python3 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336374" comment="python3-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336375" comment="python3-dbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337943" comment="python3-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337944" comment="python3-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120876" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0876</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0876" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0876" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0876" ref_url="https://www.suse.com/security/cve/CVE-2012-0876" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000155.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00046.html" source="SUSE-SU"/>
    <description>
    The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-0876/">CVE-2012-0876</cve>
	<bugzilla href="https://bugzilla.suse.com/750914">SUSE bug 750914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751464">SUSE bug 751464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751465">SUSE bug 751465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983215">SUSE bug 983215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983216">SUSE bug 983216</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120879" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0879</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0879" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0879" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0879" ref_url="https://www.suse.com/security/cve/CVE-2012-0879" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html" source="SUSE-SU"/>
    <description>
    The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-0879/">CVE-2012-0879</cve>
	<bugzilla href="https://bugzilla.suse.com/748812">SUSE bug 748812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0884</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0884" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0884" ref_url="https://www.suse.com/security/cve/CVE-2012-0884" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0547-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0884/">CVE-2012-0884</cve>
	<bugzilla href="https://bugzilla.suse.com/749210">SUSE bug 749210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749735">SUSE bug 749735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751977">SUSE bug 751977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754640">SUSE bug 754640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/761819">SUSE bug 761819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0957</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0957" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0957" ref_url="https://www.suse.com/security/cve/CVE-2012-0957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000339.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0957/">CVE-2012-0957</cve>
	<bugzilla href="https://bugzilla.suse.com/783515">SUSE bug 783515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/783606">SUSE bug 783606</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1090</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1090" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1090" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1090" ref_url="https://www.suse.com/security/cve/CVE-2012-1090" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0540-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-1090/">CVE-2012-1090</cve>
	<bugzilla href="https://bugzilla.suse.com/749569">SUSE bug 749569</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1096</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1096" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1096" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1096" ref_url="https://www.suse.com/security/cve/CVE-2012-1096" source="SUSE CVE"/>
    <description>
    NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2012-1096/">CVE-2012-1096</cve>
	<bugzilla href="https://bugzilla.suse.com/738073">SUSE bug 738073</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334334" comment="NetworkManager is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335300" comment="NetworkManager-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335289" comment="libnm-glib-vpn1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335290" comment="libnm-glib4 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335291" comment="libnm-util2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335913" comment="libnm0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335914" comment="typelib-1_0-NM-1_0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335292" comment="typelib-1_0-NMClient-1_0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335293" comment="typelib-1_0-NetworkManager-1_0 is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1126</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1126" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1126" ref_url="https://www.suse.com/security/cve/CVE-2012-1126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1126/">CVE-2012-1126</cve>
	<bugzilla href="https://bugzilla.suse.com/750937">SUSE bug 750937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1127</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1127" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1127" ref_url="https://www.suse.com/security/cve/CVE-2012-1127" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1127/">CVE-2012-1127</cve>
	<bugzilla href="https://bugzilla.suse.com/750947">SUSE bug 750947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1128</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1128" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1128" ref_url="https://www.suse.com/security/cve/CVE-2012-1128" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1128/">CVE-2012-1128</cve>
	<bugzilla href="https://bugzilla.suse.com/750942">SUSE bug 750942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1129</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1129" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1129" ref_url="https://www.suse.com/security/cve/CVE-2012-1129" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted SFNT string in a Type 42 font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1129/">CVE-2012-1129</cve>
	<bugzilla href="https://bugzilla.suse.com/750952">SUSE bug 750952</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1130</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1130" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1130" ref_url="https://www.suse.com/security/cve/CVE-2012-1130" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a PCF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1130/">CVE-2012-1130</cve>
	<bugzilla href="https://bugzilla.suse.com/750951">SUSE bug 750951</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1131</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1131" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1131" ref_url="https://www.suse.com/security/cve/CVE-2012-1131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors related to the cell table of a font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1131/">CVE-2012-1131</cve>
	<bugzilla href="https://bugzilla.suse.com/750953">SUSE bug 750953</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1132</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1132" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1132" ref_url="https://www.suse.com/security/cve/CVE-2012-1132" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1132/">CVE-2012-1132</cve>
	<bugzilla href="https://bugzilla.suse.com/750950">SUSE bug 750950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1133</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1133" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1133" ref_url="https://www.suse.com/security/cve/CVE-2012-1133" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1133/">CVE-2012-1133</cve>
	<bugzilla href="https://bugzilla.suse.com/750940">SUSE bug 750940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1134</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1134" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1134" ref_url="https://www.suse.com/security/cve/CVE-2012-1134" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1134/">CVE-2012-1134</cve>
	<bugzilla href="https://bugzilla.suse.com/750945">SUSE bug 750945</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1135</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1135" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1135" ref_url="https://www.suse.com/security/cve/CVE-2012-1135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the NPUSHB and NPUSHW instructions in a TrueType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1135/">CVE-2012-1135</cve>
	<bugzilla href="https://bugzilla.suse.com/750946">SUSE bug 750946</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1136</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1136" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1136" ref_url="https://www.suse.com/security/cve/CVE-2012-1136" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODING field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1136/">CVE-2012-1136</cve>
	<bugzilla href="https://bugzilla.suse.com/750939">SUSE bug 750939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1137</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1137" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1137" ref_url="https://www.suse.com/security/cve/CVE-2012-1137" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1137/">CVE-2012-1137</cve>
	<bugzilla href="https://bugzilla.suse.com/750943">SUSE bug 750943</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1138</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1138" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1138" ref_url="https://www.suse.com/security/cve/CVE-2012-1138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1138/">CVE-2012-1138</cve>
	<bugzilla href="https://bugzilla.suse.com/750941">SUSE bug 750941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1139</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1139" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1139" ref_url="https://www.suse.com/security/cve/CVE-2012-1139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1139/">CVE-2012-1139</cve>
	<bugzilla href="https://bugzilla.suse.com/750938">SUSE bug 750938</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1140</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1140" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1140" ref_url="https://www.suse.com/security/cve/CVE-2012-1140" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1140/">CVE-2012-1140</cve>
	<bugzilla href="https://bugzilla.suse.com/750954">SUSE bug 750954</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1141</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1141" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1141" ref_url="https://www.suse.com/security/cve/CVE-2012-1141" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1141/">CVE-2012-1141</cve>
	<bugzilla href="https://bugzilla.suse.com/750955">SUSE bug 750955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1142</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1142" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1142" ref_url="https://www.suse.com/security/cve/CVE-2012-1142" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1142/">CVE-2012-1142</cve>
	<bugzilla href="https://bugzilla.suse.com/750948">SUSE bug 750948</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1143</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1143" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1143" ref_url="https://www.suse.com/security/cve/CVE-2012-1143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1143/">CVE-2012-1143</cve>
	<bugzilla href="https://bugzilla.suse.com/750949">SUSE bug 750949</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1144</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1144" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1144" ref_url="https://www.suse.com/security/cve/CVE-2012-1144" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1144/">CVE-2012-1144</cve>
	<bugzilla href="https://bugzilla.suse.com/750944">SUSE bug 750944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1147</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1147" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1147" ref_url="https://www.suse.com/security/cve/CVE-2012-1147" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000155.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00046.html" source="SUSE-SU"/>
    <description>
    readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1147/">CVE-2012-1147</cve>
	<bugzilla href="https://bugzilla.suse.com/750914">SUSE bug 750914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751464">SUSE bug 751464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751465">SUSE bug 751465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1148</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1148" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1148" ref_url="https://www.suse.com/security/cve/CVE-2012-1148" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000155.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00046.html" source="SUSE-SU"/>
    <description>
    Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1148/">CVE-2012-1148</cve>
	<bugzilla href="https://bugzilla.suse.com/750914">SUSE bug 750914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751464">SUSE bug 751464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751465">SUSE bug 751465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1150</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1150" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1150" ref_url="https://www.suse.com/security/cve/CVE-2012-1150" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000204.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0667-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-1150/">CVE-2012-1150</cve>
	<bugzilla href="https://bugzilla.suse.com/751718">SUSE bug 751718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/755383">SUSE bug 755383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826682">SUSE bug 826682</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334160" comment="python3 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334160" comment="python3 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336374" comment="python3-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336375" comment="python3-dbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337943" comment="python3-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337944" comment="python3-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1152</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1152" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1152" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1152" ref_url="https://www.suse.com/security/cve/CVE-2012-1152" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1000-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0319-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html" source="SUSE-SU"/>
    <description>
    Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and perl-YAML-LibYAML) module 0.38 for Perl allow remote attackers to cause a denial of service (process crash) via format string specifiers in a (1) YAML stream to the Load function, (2) YAML node to the load_node function, (3) YAML mapping to the load_mapping function, or (4) YAML sequence to the load_sequence function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1152/">CVE-2012-1152</cve>
	<bugzilla href="https://bugzilla.suse.com/751503">SUSE bug 751503</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487702" comment="perl-YAML-LibYAML-0.59-1.16 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1162</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1162" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1162" ref_url="https://www.suse.com/security/cve/CVE-2012-1162" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00041.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1162/">CVE-2012-1162</cve>
	<bugzilla href="https://bugzilla.suse.com/751829">SUSE bug 751829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751830">SUSE bug 751830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480830" comment="libzip-devel-1.5.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1163</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1163" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1163" ref_url="https://www.suse.com/security/cve/CVE-2012-1163" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00041.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an information leak.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1163/">CVE-2012-1163</cve>
	<bugzilla href="https://bugzilla.suse.com/751829">SUSE bug 751829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751830">SUSE bug 751830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480830" comment="libzip-devel-1.5.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1165</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1165" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1165" ref_url="https://www.suse.com/security/cve/CVE-2012-1165" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0474-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1165/">CVE-2012-1165</cve>
	<bugzilla href="https://bugzilla.suse.com/749210">SUSE bug 749210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749213">SUSE bug 749213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751946">SUSE bug 751946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754640">SUSE bug 754640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1173</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1173" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1173" ref_url="https://www.suse.com/security/cve/CVE-2012-1173" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0539-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00046.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1173/">CVE-2012-1173</cve>
	<bugzilla href="https://bugzilla.suse.com/753362">SUSE bug 753362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/767852">SUSE bug 767852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334077" comment="tiff is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335906" comment="libtiff-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335904" comment="libtiff5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335905" comment="libtiff5-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1174</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1174" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1174" ref_url="https://www.suse.com/security/cve/CVE-2012-1174" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0383-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00030.html" source="SUSE-SU"/>
    <description>
    The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1174/">CVE-2012-1174</cve>
	<bugzilla href="https://bugzilla.suse.com/752281">SUSE bug 752281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481501" comment="libsystemd0-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481502" comment="libsystemd0-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481503" comment="libudev-devel-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481504" comment="libudev1-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481505" comment="libudev1-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481506" comment="systemd-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481507" comment="systemd-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481508" comment="systemd-bash-completion-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481509" comment="systemd-container-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481510" comment="systemd-coredump-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481511" comment="systemd-devel-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481512" comment="systemd-sysvinit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481513" comment="udev-234-24.25.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121457" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1457</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1457" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1457" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1457" ref_url="https://www.suse.com/security/cve/CVE-2012-1457" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000176.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1457/">CVE-2012-1457</cve>
	<bugzilla href="https://bugzilla.suse.com/753611">SUSE bug 753611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/767574">SUSE bug 767574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1458</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1458" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1458" ref_url="https://www.suse.com/security/cve/CVE-2012-1458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000176.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CHM parser implementations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1458/">CVE-2012-1458</cve>
	<bugzilla href="https://bugzilla.suse.com/753613">SUSE bug 753613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/767574">SUSE bug 767574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1459</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1459" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1459" ref_url="https://www.suse.com/security/cve/CVE-2012-1459" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000176.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1459/">CVE-2012-1459</cve>
	<bugzilla href="https://bugzilla.suse.com/753610">SUSE bug 753610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/767574">SUSE bug 767574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1571</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1571" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1571" ref_url="https://www.suse.com/security/cve/CVE-2012-1571" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00028.html" source="SUSE-SU"/>
    <description>
    file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1571/">CVE-2012-1571</cve>
	<bugzilla href="https://bugzilla.suse.com/753303">SUSE bug 753303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883306">SUSE bug 883306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/884986">SUSE bug 884986</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987530">SUSE bug 987530</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481116" comment="file-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481117" comment="file-devel-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481118" comment="file-magic-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481119" comment="libmagic1-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481120" comment="libmagic1-32bit-5.32-7.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1583</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1583" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1583" ref_url="https://www.suse.com/security/cve/CVE-2012-1583" source="SUSE CVE"/>
    <description>
    Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1583/">CVE-2012-1583</cve>
	<bugzilla href="https://bugzilla.suse.com/757707">SUSE bug 757707</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1601</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1601" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1601" ref_url="https://www.suse.com/security/cve/CVE-2012-1601" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service (NULL pointer dereference and host OS crash) by making a KVM_CREATE_IRQCHIP ioctl call after a virtual CPU already exists.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1601/">CVE-2012-1601</cve>
	<bugzilla href="https://bugzilla.suse.com/754898">SUSE bug 754898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1616</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1616" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1616" ref_url="https://www.suse.com/security/cve/CVE-2012-1616" source="SUSE CVE"/>
    <description>
    Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1616/">CVE-2012-1616</cve>
	<bugzilla href="https://bugzilla.suse.com/768322">SUSE bug 768322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488880" comment="argyllcms-1.9.2-2.27 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1667</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1667" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1667" ref_url="https://www.suse.com/security/cve/CVE-2012-1667" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0741-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0741-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0741-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0741-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0741-5" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0741-6" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0722-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-1667/">CVE-2012-1667</cve>
	<bugzilla href="https://bugzilla.suse.com/765315">SUSE bug 765315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/792926">SUSE bug 792926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1937</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1937" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1937" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1937" ref_url="https://www.suse.com/security/cve/CVE-2012-1937" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1937/">CVE-2012-1937</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1938</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1938" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1938" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1938" ref_url="https://www.suse.com/security/cve/CVE-2012-1938" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) methodjit/ImmutableSync.cpp, (2) the JSObject::makeDenseArraySlow function in js/src/jsarray.cpp, and unknown other components.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1938/">CVE-2012-1938</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121940" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1940</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1940" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1940" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1940" ref_url="https://www.suse.com/security/cve/CVE-2012-1940" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by changing the size of a container of absolutely positioned elements in a column.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1940/">CVE-2012-1940</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121941" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1941</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1941" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1941" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1941" ref_url="https://www.suse.com/security/cve/CVE-2012-1941" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsHTMLReflowState::CalculateHypotheticalBox function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code by resizing a window displaying absolutely positioned and relatively positioned elements in nested columns.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1941/">CVE-2012-1941</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1944</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1944" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1944" ref_url="https://www.suse.com/security/cve/CVE-2012-1944" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1944/">CVE-2012-1944</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1945</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1945" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1945" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1945" ref_url="https://www.suse.com/security/cve/CVE-2012-1945" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to obtain sensitive information via an HTML document that loads a shortcut (aka .lnk) file for display within an IFRAME element, as demonstrated by a network share implemented by (1) Microsoft Windows or (2) Samba.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1945/">CVE-2012-1945</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1946</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1946" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1946" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1946" ref_url="https://www.suse.com/security/cve/CVE-2012-1946" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsINode::ReplaceOrInsertBefore function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 might allow remote attackers to execute arbitrary code via document changes involving replacement or insertion of a node.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1946/">CVE-2012-1946</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1947</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1947" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1947" ref_url="https://www.suse.com/security/cve/CVE-2012-1947" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the utf16_to_isolatin1 function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code via vectors that trigger a character-set conversion failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1947/">CVE-2012-1947</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1948</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1948" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1948" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1948" ref_url="https://www.suse.com/security/cve/CVE-2012-1948" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1948/">CVE-2012-1948</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121949" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1949</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1949" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1949" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1949" ref_url="https://www.suse.com/security/cve/CVE-2012-1949" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1949/">CVE-2012-1949</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1951</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1951" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1951" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1951" ref_url="https://www.suse.com/security/cve/CVE-2012-1951" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code by interacting with objects used for SMIL Timing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1951/">CVE-2012-1951</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1952</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1952" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1952" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1952" ref_url="https://www.suse.com/security/cve/CVE-2012-1952" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1952/">CVE-2012-1952</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1953</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1953" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1953" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1953" ref_url="https://www.suse.com/security/cve/CVE-2012-1953" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (buffer over-read, incorrect pointer dereference, and heap-based buffer overflow) or possibly execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1953/">CVE-2012-1953</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1954</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1954" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1954" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1954" ref_url="https://www.suse.com/security/cve/CVE-2012-1954" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1954/">CVE-2012-1954</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1955</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1955" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1955" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1955" ref_url="https://www.suse.com/security/cve/CVE-2012-1955" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to spoof the address bar via vectors involving history.forward and history.back calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1955/">CVE-2012-1955</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1956</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1956" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1956" ref_url="https://www.suse.com/security/cve/CVE-2012-1956" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1956/">CVE-2012-1956</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1957</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1957" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1957" ref_url="https://www.suse.com/security/cve/CVE-2012-1957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a feed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1957/">CVE-2012-1957</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1958</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1958" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1958" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1958" ref_url="https://www.suse.com/security/cve/CVE-2012-1958" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 might allow remote attackers to execute arbitrary code via vectors related to focused content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1958/">CVE-2012-1958</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1959</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1959" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1959" ref_url="https://www.suse.com/security/cve/CVE-2012-1959" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrappers (SCSW) during the cross-compartment wrapping of objects, which allows remote attackers to bypass intended XBL access restrictions via crafted content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1959/">CVE-2012-1959</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1960</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1960" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1960" ref_url="https://www.suse.com/security/cve/CVE-2012-1960" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The qcms_transform_data_rgb_out_lut_sse2 function in the QCMS implementation in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 might allow remote attackers to obtain sensitive information from process memory via a crafted color profile that triggers an out-of-bounds read operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1960/">CVE-2012-1960</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1961</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1961" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1961" ref_url="https://www.suse.com/security/cve/CVE-2012-1961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1961/">CVE-2012-1961</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1962</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1962" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1962" ref_url="https://www.suse.com/security/cve/CVE-2012-1962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1962/">CVE-2012-1962</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1963</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1963" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1963" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1963" ref_url="https://www.suse.com/security/cve/CVE-2012-1963" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violation report, which allows remote web servers to capture OpenID credentials and OAuth 2.0 access tokens by triggering a violation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1963/">CVE-2012-1963</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1967</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1967" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1967" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1967" ref_url="https://www.suse.com/security/cve/CVE-2012-1967" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1967/">CVE-2012-1967</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1970</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1970" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1970" ref_url="https://www.suse.com/security/cve/CVE-2012-1970" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1970/">CVE-2012-1970</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1972</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1972" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1972" ref_url="https://www.suse.com/security/cve/CVE-2012-1972" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1972/">CVE-2012-1972</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1973</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1973" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1973" ref_url="https://www.suse.com/security/cve/CVE-2012-1973" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1973/">CVE-2012-1973</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1974</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1974" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1974" ref_url="https://www.suse.com/security/cve/CVE-2012-1974" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1974/">CVE-2012-1974</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1975</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1975" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1975" ref_url="https://www.suse.com/security/cve/CVE-2012-1975" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1975/">CVE-2012-1975</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1976</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1976" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1976" ref_url="https://www.suse.com/security/cve/CVE-2012-1976" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1976/">CVE-2012-1976</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2100</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2100" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2100" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2100" ref_url="https://www.suse.com/security/cve/CVE-2012-2100" source="SUSE CVE"/>
    <description>
    The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2100/">CVE-2012-2100</cve>
	<bugzilla href="https://bugzilla.suse.com/757278">SUSE bug 757278</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2110</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2110" ref_url="https://www.suse.com/security/cve/CVE-2012-2110" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0623-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1149-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021456" ref_url="https://www.suse.com/support/kb/doc/?id=7021456" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021736" ref_url="https://www.suse.com/support/kb/doc/?id=7021736" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021874" ref_url="https://www.suse.com/support/kb/doc/?id=7021874" source="SUSE-SU"/>
		<reference ref_id="TID7021991" ref_url="https://www.suse.com/support/kb/doc/?id=7021991" source="SUSE-SU"/>
		<reference ref_id="TID7022023" ref_url="https://www.suse.com/support/kb/doc/?id=7022023" source="SUSE-SU"/>
		<reference ref_id="TID7022090" ref_url="https://www.suse.com/support/kb/doc/?id=7022090" source="SUSE-SU"/>
		<reference ref_id="TID7022091" ref_url="https://www.suse.com/support/kb/doc/?id=7022091" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2110/">CVE-2012-2110</cve>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/778825">SUSE bug 778825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2113</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2113" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2113" ref_url="https://www.suse.com/security/cve/CVE-2012-2113" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0829-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00009.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2113/">CVE-2012-2113</cve>
	<bugzilla href="https://bugzilla.suse.com/767852">SUSE bug 767852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334077" comment="tiff is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335906" comment="libtiff-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335904" comment="libtiff5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335905" comment="libtiff5-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2119</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2119" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2119" ref_url="https://www.suse.com/security/cve/CVE-2012-2119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0789-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0781-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0812-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM guest users to cause a denial of service (crash) via a long descriptor with a long vector length.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2119/">CVE-2012-2119</cve>
	<bugzilla href="https://bugzilla.suse.com/758243">SUSE bug 758243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2121</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2121" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2121" ref_url="https://www.suse.com/security/cve/CVE-2012-2121" source="SUSE CVE"/>
    <description>
    The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2121/">CVE-2012-2121</cve>
	<bugzilla href="https://bugzilla.suse.com/758355">SUSE bug 758355</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2123</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2123" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2123" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2123" ref_url="https://www.suse.com/security/cve/CVE-2012-2123" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0781-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0812-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2123/">CVE-2012-2123</cve>
	<bugzilla href="https://bugzilla.suse.com/758260">SUSE bug 758260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2127</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2127" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2127" ref_url="https://www.suse.com/security/cve/CVE-2012-2127" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0689-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00001.html" source="SUSE-SU"/>
    <description>
    fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2127/">CVE-2012-2127</cve>
	<bugzilla href="https://bugzilla.suse.com/757783">SUSE bug 757783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2133</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2133" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2133" ref_url="https://www.suse.com/security/cve/CVE-2012-2133" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0689-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers improper handling of quota data.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2133/">CVE-2012-2133</cve>
	<bugzilla href="https://bugzilla.suse.com/758532">SUSE bug 758532</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2136</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2136" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2136" ref_url="https://www.suse.com/security/cve/CVE-2012-2136" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0789-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0781-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0812-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2136/">CVE-2012-2136</cve>
	<bugzilla href="https://bugzilla.suse.com/765320">SUSE bug 765320</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2137</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2137" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2137" ref_url="https://www.suse.com/security/cve/CVE-2012-2137" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in virt/kvm/irq_comm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to Message Signaled Interrupts (MSI), irq routing entries, and an incorrect check by the setup_routing_entry function before invoking the kvm_set_irq function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2137/">CVE-2012-2137</cve>
	<bugzilla href="https://bugzilla.suse.com/767612">SUSE bug 767612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2142</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2142" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2142" ref_url="https://www.suse.com/security/cve/CVE-2012-2142" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1371-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00049.html" source="SUSE-SU"/>
    <description>
    The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-2142/">CVE-2012-2142</cve>
	<bugzilla href="https://bugzilla.suse.com/1133493">SUSE bug 1133493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/834475">SUSE bug 834475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/834476">SUSE bug 834476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334136" comment="evince is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336178" comment="evince-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336166" comment="evince-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336167" comment="evince-plugin-djvudocument is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336168" comment="evince-plugin-dvidocument is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336169" comment="evince-plugin-pdfdocument is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336170" comment="evince-plugin-psdocument is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336171" comment="evince-plugin-tiffdocument is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336172" comment="evince-plugin-xpsdocument is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336173" comment="libevdocument3-4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336174" comment="libevview3-3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336175" comment="nautilus-evince is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336176" comment="typelib-1_0-EvinceDocument-3_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336177" comment="typelib-1_0-EvinceView-3_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338790" comment="libpoppler-cpp0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337408" comment="libpoppler-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337409" comment="libpoppler-glib-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337738" comment="libpoppler-glib8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338791" comment="libpoppler73 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337407" comment="poppler-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338792" comment="typelib-1_0-Poppler-0_18 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2214</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2214" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2214" ref_url="https://www.suse.com/security/cve/CVE-2012-2214" source="SUSE CVE"/>
    <description>
    proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service (application crash) via a sequence of XMPP file-transfer requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2214/">CVE-2012-2214</cve>
	<bugzilla href="https://bugzilla.suse.com/760890">SUSE bug 760890</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2240</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2240" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2240" ref_url="https://www.suse.com/security/cve/CVE-2012-2240" source="SUSE CVE"/>
    <description>
    scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2240/">CVE-2012-2240</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487626" comment="checkbashisms-2.15.1-1.49 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2241</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2241" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2241" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2241" ref_url="https://www.suse.com/security/cve/CVE-2012-2241" source="SUSE CVE"/>
    <description>
    scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2241/">CVE-2012-2241</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487626" comment="checkbashisms-2.15.1-1.49 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2313</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2313" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2313" ref_url="https://www.suse.com/security/cve/CVE-2012-2313" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0689-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-02-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2313/">CVE-2012-2313</cve>
	<bugzilla href="https://bugzilla.suse.com/758813">SUSE bug 758813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2337</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2337" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2337" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2337" ref_url="https://www.suse.com/security/cve/CVE-2012-2337" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0641-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0652-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00036.html" source="SUSE-SU"/>
    <description>
    sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2337/">CVE-2012-2337</cve>
	<bugzilla href="https://bugzilla.suse.com/762327">SUSE bug 762327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826687">SUSE bug 826687</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481659" comment="sudo-1.8.22-4.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481660" comment="sudo-devel-1.8.22-4.3.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2369</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2369" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2369" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2369" ref_url="https://www.suse.com/security/cve/CVE-2012-2369" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0717-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbitrary code via format string specifiers in data that generates a log message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2369/">CVE-2012-2369</cve>
	<bugzilla href="https://bugzilla.suse.com/762498">SUSE bug 762498</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489042" comment="pidgin-plugin-otr-4.0.2-1.61 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489043" comment="pidgin-plugin-otr-lang-4.0.2-1.61 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2372</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2372" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2372" ref_url="https://www.suse.com/security/cve/CVE-2012-2372" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000435.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG_ON and kernel panic) by establishing an RDS connection with the source IP address equal to the IPoIB interface's own IP address, as demonstrated by rds-ping.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2372/">CVE-2012-2372</cve>
	<bugzilla href="https://bugzilla.suse.com/767610">SUSE bug 767610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/795039">SUSE bug 795039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2375</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2375" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2375" ref_url="https://www.suse.com/security/cve/CVE-2012-2375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0789-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00020.html" source="SUSE-SU"/>
    <description>
    The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words in an FATTR4_ACL reply. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-4131.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-04"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2375/">CVE-2012-2375</cve>
	<bugzilla href="https://bugzilla.suse.com/762992">SUSE bug 762992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/851103">SUSE bug 851103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2383</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2383" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2383" ref_url="https://www.suse.com/security/cve/CVE-2012-2383" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the i915_gem_execbuffer2 function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-10"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2383/">CVE-2012-2383</cve>
	<bugzilla href="https://bugzilla.suse.com/763194">SUSE bug 763194</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2384</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2384" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2384" ref_url="https://www.suse.com/security/cve/CVE-2012-2384" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the i915_gem_do_execbuffer function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2384/">CVE-2012-2384</cve>
	<bugzilla href="https://bugzilla.suse.com/763194">SUSE bug 763194</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2388</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2388" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2388" ref_url="https://www.suse.com/security/cve/CVE-2012-2388" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00002.html" source="SUSE-SU"/>
    <description>
    The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2388/">CVE-2012-2388</cve>
	<bugzilla href="https://bugzilla.suse.com/1107874">SUSE bug 1107874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/761325">SUSE bug 761325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/815236">SUSE bug 815236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2390</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2390" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2390" ref_url="https://www.suse.com/security/cve/CVE-2012-2390" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0789-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory consumption or system crash) via invalid MAP_HUGETLB mmap operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2390/">CVE-2012-2390</cve>
	<bugzilla href="https://bugzilla.suse.com/764150">SUSE bug 764150</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2396</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2396" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2396" ref_url="https://www.suse.com/security/cve/CVE-2012-2396" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0615-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00017.html" source="SUSE-SU"/>
    <description>
    VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2396/">CVE-2012-2396</cve>
	<bugzilla href="https://bugzilla.suse.com/760496">SUSE bug 760496</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480753" comment="libtag1-1.11.1-2.50 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486504" comment="libtag-devel-1.11.1-2.50 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486505" comment="libtag_c0-1.11.1-2.50 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2417</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2417" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2417" ref_url="https://www.suse.com/security/cve/CVE-2012-2417" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000177.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0830-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00010.html" source="SUSE-SU"/>
    <description>
    PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2417/">CVE-2012-2417</cve>
	<bugzilla href="https://bugzilla.suse.com/764127">SUSE bug 764127</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480899" comment="python3-pycrypto-2.6.1-1.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2451</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2451" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2451" ref_url="https://www.suse.com/security/cve/CVE-2012-2451" source="SUSE CVE"/>
    <description>
    The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.  NOTE: some of these details are obtained from third party information.  NOTE: it has been reported that this might only be exploitable by writing in the same directory as the .ini file. If this is the case, then this issue might not cross privilege boundaries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2451/">CVE-2012-2451</cve>
	<bugzilla href="https://bugzilla.suse.com/760459">SUSE bug 760459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487697" comment="perl-Config-IniFiles-2.94-1.23 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2657</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2657" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2657" ref_url="https://www.suse.com/security/cve/CVE-2012-2657" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** Buffer overflow in the SQLDriverConnect function in unixODBC 2.0.10, 2.3.1, and earlier allows local users to cause a denial of service (crash) via a long string in the FILEDSN option. NOTE: this issue might not be a vulnerability, since the ability to set this option typically implies that the attacker already has legitimate access to cause a DoS or execute code, and therefore the issue would not cross privilege boundaries. There may be limited attack scenarios if isql command-line options are exposed to an attacker, although it seems likely that other, more serious issues would also be exposed, and this issue might not cross privilege boundaries in that context.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-08-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2657/">CVE-2012-2657</cve>
	<bugzilla href="https://bugzilla.suse.com/764737">SUSE bug 764737</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334325" comment="unixODBC is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009654123" comment="libodbc2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654124" comment="libodbc2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334325" comment="unixODBC is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337632" comment="unixODBC-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337630" comment="unixODBC-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337633" comment="unixODBC-devel-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009654123" comment="libodbc2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654124" comment="libodbc2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654125" comment="libodbc2-64bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334325" comment="unixODBC is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337632" comment="unixODBC-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654126" comment="unixODBC-64bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337630" comment="unixODBC-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337633" comment="unixODBC-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654127" comment="unixODBC-devel-64bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2669</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2669" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2669" ref_url="https://www.suse.com/security/cve/CVE-2012-2669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000166.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1526-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00042.html" source="SUSE-SU"/>
    <description>
    The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlink communication via a crafted connector message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-18"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2669/">CVE-2012-2669</cve>
	<bugzilla href="https://bugzilla.suse.com/761200">SUSE bug 761200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480329" comment="hyper-v-7-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2673</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2673" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2673" ref_url="https://www.suse.com/security/cve/CVE-2012-2673" source="SUSE CVE"/>
    <description>
    Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2673/">CVE-2012-2673</cve>
	<bugzilla href="https://bugzilla.suse.com/765444">SUSE bug 765444</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480249" comment="gc-devel-7.6.4-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480250" comment="libgc1-7.6.4-1.16 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2686</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2686" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2686" ref_url="https://www.suse.com/security/cve/CVE-2012-2686" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0337-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0339-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00072.html" source="SUSE-SU"/>
    <description>
    crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2686/">CVE-2012-2686</cve>
	<bugzilla href="https://bugzilla.suse.com/802648">SUSE bug 802648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2687</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2687" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2687" ref_url="https://www.suse.com/security/cve/CVE-2012-2687" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000464.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0243-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0632-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00065.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2687/">CVE-2012-2687</cve>
	<bugzilla href="https://bugzilla.suse.com/777260">SUSE bug 777260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2737</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2737" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2737" ref_url="https://www.suse.com/security/cve/CVE-2012-2737" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0845-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00016.html" source="SUSE-SU"/>
    <description>
    The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2737/">CVE-2012-2737</cve>
	<bugzilla href="https://bugzilla.suse.com/768807">SUSE bug 768807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486585" comment="accountsservice-0.6.45-6.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486586" comment="accountsservice-devel-0.6.45-6.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486587" comment="accountsservice-lang-0.6.45-6.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486588" comment="libaccountsservice0-0.6.45-6.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486589" comment="typelib-1_0-AccountsService-1_0-0.6.45-6.10.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2744</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2744" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2744" ref_url="https://www.suse.com/security/cve/CVE-2012-2744" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00015.html" source="SUSE-SU"/>
    <description>
    net/ipv6/netfilter/nf_conntrack_reasm.c in the Linux kernel before 2.6.34, when the nf_conntrack_ipv6 module is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via certain types of fragmented IPv6 packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2744/">CVE-2012-2744</cve>
	<bugzilla href="https://bugzilla.suse.com/770697">SUSE bug 770697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2745</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2745" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2745" ref_url="https://www.suse.com/security/cve/CVE-2012-2745" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-October/000278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The copy_creds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process, which allows local users to cause a denial of service (panic) via a crafted application that uses the fork system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2745/">CVE-2012-2745</cve>
	<bugzilla href="https://bugzilla.suse.com/770695">SUSE bug 770695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/795039">SUSE bug 795039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2751</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2751" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2751" ref_url="https://www.suse.com/security/cve/CVE-2012-2751" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1331-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1342-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html" source="SUSE-SU"/>
    <description>
    ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data Content-Type header, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-5031.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2751/">CVE-2012-2751</cve>
	<bugzilla href="https://bugzilla.suse.com/768293">SUSE bug 768293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488116" comment="apache2-mod_security2-2.9.2-1.34 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2808</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2808" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2808" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2808" ref_url="https://www.suse.com/security/cve/CVE-2012-2808" source="SUSE CVE"/>
    <description>
    The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2015-0800.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2808/">CVE-2012-2808</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2812</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2812" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2812" ref_url="https://www.suse.com/security/cve/CVE-2012-2812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2812/">CVE-2012-2812</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482780" comment="libexif-devel-0.6.21-3.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482781" comment="libexif12-0.6.21-3.16 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2813</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2813" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2813" ref_url="https://www.suse.com/security/cve/CVE-2012-2813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2813/">CVE-2012-2813</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482780" comment="libexif-devel-0.6.21-3.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482781" comment="libexif12-0.6.21-3.16 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2814</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2814" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2814" ref_url="https://www.suse.com/security/cve/CVE-2012-2814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2814/">CVE-2012-2814</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482780" comment="libexif-devel-0.6.21-3.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482781" comment="libexif12-0.6.21-3.16 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2836</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2836" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2836" ref_url="https://www.suse.com/security/cve/CVE-2012-2836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2836/">CVE-2012-2836</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482780" comment="libexif-devel-0.6.21-3.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482781" comment="libexif12-0.6.21-3.16 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2837</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2837" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2837" ref_url="https://www.suse.com/security/cve/CVE-2012-2837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2837/">CVE-2012-2837</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482780" comment="libexif-devel-0.6.21-3.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482781" comment="libexif12-0.6.21-3.16 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2840</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2840" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2840" ref_url="https://www.suse.com/security/cve/CVE-2012-2840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2840/">CVE-2012-2840</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482780" comment="libexif-devel-0.6.21-3.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482781" comment="libexif12-0.6.21-3.16 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2841</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2841" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2841" ref_url="https://www.suse.com/security/cve/CVE-2012-2841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-18"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2841/">CVE-2012-2841</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482780" comment="libexif-devel-0.6.21-3.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482781" comment="libexif12-0.6.21-3.16 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2944</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2944" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2944" ref_url="https://www.suse.com/security/cve/CVE-2012-2944" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1077-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000239.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1069-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00049.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2944/">CVE-2012-2944</cve>
	<bugzilla href="https://bugzilla.suse.com/764699">SUSE bug 764699</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482443" comment="libupsclient1-2.7.4-4.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488209" comment="nut-2.7.4-4.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488210" comment="nut-devel-2.7.4-4.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488211" comment="nut-drivers-net-2.7.4-4.72 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3105</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3105" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3105" ref_url="https://www.suse.com/security/cve/CVE-2012-3105" source="SUSE CVE"/>
    <description>
    The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not properly mitigate an unspecified flaw in an NVIDIA driver, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a related issue to CVE-2011-3101.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3105/">CVE-2012-3105</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3236</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3236" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3236" ref_url="https://www.suse.com/security/cve/CVE-2012-3236" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0963-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000199.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0966-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000200.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html" source="SUSE-SU"/>
    <description>
    fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed XTENSION header of a .fit file, as demonstrated using a long string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3236/">CVE-2012-3236</cve>
	<bugzilla href="https://bugzilla.suse.com/763595">SUSE bug 763595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/768376">SUSE bug 768376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/769565">SUSE bug 769565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488900" comment="gimp-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488901" comment="gimp-devel-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488902" comment="gimp-lang-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488903" comment="gimp-plugins-python-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488904" comment="libgimp-2_0-0-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488905" comment="libgimpui-2_0-0-2.8.22-3.42 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3291</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3291" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3291" ref_url="https://www.suse.com/security/cve/CVE-2012-3291" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1072-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00186.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3291/">CVE-2012-3291</cve>
	<bugzilla href="https://bugzilla.suse.com/767616">SUSE bug 767616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489039" comment="openconnect-7.08-4.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489040" comment="openconnect-devel-7.08-4.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489041" comment="openconnect-lang-7.08-4.26 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3358</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3358" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3358" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3358" ref_url="https://www.suse.com/security/cve/CVE-2012-3358" source="SUSE CVE"/>
    <description>
    Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted (1) tile number or (2) tile length in a JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3358/">CVE-2012-3358</cve>
	<bugzilla href="https://bugzilla.suse.com/770649">SUSE bug 770649</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3364</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3364" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3364" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3364" ref_url="https://www.suse.com/security/cve/CVE-2012-3364" source="SUSE CVE"/>
    <description>
    Multiple stack-based buffer overflows in the Near Field Communication Controller Interface (NCI) in the Linux kernel before 3.4.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via incoming frames with crafted length fields.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-24"/>
	<updated date="2023-02-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3364/">CVE-2012-3364</cve>
	<bugzilla href="https://bugzilla.suse.com/769171">SUSE bug 769171</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3374</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3374" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3374" ref_url="https://www.suse.com/security/cve/CVE-2012-3374" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0890-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00009.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3374/">CVE-2012-3374</cve>
	<bugzilla href="https://bugzilla.suse.com/770304">SUSE bug 770304</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3375</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3375" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3375" ref_url="https://www.suse.com/security/cve/CVE-2012-3375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3375/">CVE-2012-3375</cve>
	<bugzilla href="https://bugzilla.suse.com/769896">SUSE bug 769896</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3386</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3386" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3386" ref_url="https://www.suse.com/security/cve/CVE-2012-3386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000578.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1519-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHVSBRLGJ5C5MYYVH2AXVEQBTRVMVFRD/" source="SUSE-SU"/>
    <description>
    The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3386/">CVE-2012-3386</cve>
	<bugzilla href="https://bugzilla.suse.com/770618">SUSE bug 770618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786745">SUSE bug 786745</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488019" comment="gv-3.7.4-1.41 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3401</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3401" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3401" ref_url="https://www.suse.com/security/cve/CVE-2012-3401" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0955-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00011.html" source="SUSE-SU"/>
    <description>
    The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3401/">CVE-2012-3401</cve>
	<bugzilla href="https://bugzilla.suse.com/770816">SUSE bug 770816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3406</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3406" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3406" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3406" ref_url="https://www.suse.com/security/cve/CVE-2012-3406" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1488-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-November/000297.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1666-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000315.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000539.html" source="SUSE-SU"/>
    <description>
    The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3406/">CVE-2012-3406</cve>
	<bugzilla href="https://bugzilla.suse.com/770891">SUSE bug 770891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826666">SUSE bug 826666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3412</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3412" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3412" ref_url="https://www.suse.com/security/cve/CVE-2012-3412" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that trigger a small MSS value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3412/">CVE-2012-3412</cve>
	<bugzilla href="https://bugzilla.suse.com/774523">SUSE bug 774523</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3430</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3430" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3430" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3430" ref_url="https://www.suse.com/security/cve/CVE-2012-3430" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-17"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3430/">CVE-2012-3430</cve>
	<bugzilla href="https://bugzilla.suse.com/773383">SUSE bug 773383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/795039">SUSE bug 795039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3482</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3482" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3482" ref_url="https://www.suse.com/security/cve/CVE-2012-3482" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0872-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001966.html" source="SUSE-SU"/>
    <description>
    Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3482/">CVE-2012-3482</cve>
	<bugzilla href="https://bugzilla.suse.com/775988">SUSE bug 775988</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480228" comment="fetchmail-6.3.26-3.27 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482674" comment="fetchmailconf-6.3.26-3.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3499</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3499" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3499" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3499" ref_url="https://www.suse.com/security/cve/CVE-2012-3499" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0648-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000464.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0632-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00049.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3499/">CVE-2012-3499</cve>
	<bugzilla href="https://bugzilla.suse.com/806458">SUSE bug 806458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807511">SUSE bug 807511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3500</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3500" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3500" ref_url="https://www.suse.com/security/cve/CVE-2012-3500" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1437-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00000.html" source="SUSE-SU"/>
    <description>
    scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3500/">CVE-2012-3500</cve>
	<bugzilla href="https://bugzilla.suse.com/778291">SUSE bug 778291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487626" comment="checkbashisms-2.15.1-1.49 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3502</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3502" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3502" ref_url="https://www.suse.com/security/cve/CVE-2012-3502" source="SUSE CVE"/>
    <description>
    The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server 2.4.x before 2.4.3 does not properly determine the situations that require closing a back-end connection, which allows remote attackers to obtain sensitive information in opportunistic circumstances by reading a response that was intended for a different client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3502/">CVE-2012-3502</cve>
	<bugzilla href="https://bugzilla.suse.com/777119">SUSE bug 777119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3510</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3510" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3510" ref_url="https://www.suse.com/security/cve/CVE-2012-3510" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or cause a denial of service (system crash) via a taskstats TASKSTATS_CMD_ATTR_PID command.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3510/">CVE-2012-3510</cve>
	<bugzilla href="https://bugzilla.suse.com/776888">SUSE bug 776888</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123520" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3520</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3520" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3520" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3520" ref_url="https://www.suse.com/security/cve/CVE-2012-3520" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0261-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00018.html" source="SUSE-SU"/>
    <description>
    The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCM_CREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to (1) Avahi or (2) NetworkManager.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3520/">CVE-2012-3520</cve>
	<bugzilla href="https://bugzilla.suse.com/776925">SUSE bug 776925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3524</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3524" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3524" ref_url="https://www.suse.com/security/cve/CVE-2012-3524" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1418-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1228-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0111-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00051.html" source="SUSE-SU"/>
    <description>
    libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the applications that do not cleanse environment variables, not in libdbus itself: "we do not support use of libdbus in setuid binaries that do not sanitize their environment before their first call into libdbus."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3524/">CVE-2012-3524</cve>
	<bugzilla href="https://bugzilla.suse.com/697105">SUSE bug 697105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/852781">SUSE bug 852781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912016">SUSE bug 912016</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481139" comment="glib2-devel-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481140" comment="glib2-lang-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481141" comment="glib2-tools-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481142" comment="libgio-2_0-0-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481143" comment="libgio-2_0-0-32bit-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481144" comment="libglib-2_0-0-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481145" comment="libglib-2_0-0-32bit-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481146" comment="libgmodule-2_0-0-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481147" comment="libgmodule-2_0-0-32bit-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481148" comment="libgobject-2_0-0-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481149" comment="libgobject-2_0-0-32bit-2.54.3-4.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481150" comment="libgthread-2_0-0-2.54.3-4.10.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3535</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3535" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3535" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3535" ref_url="https://www.suse.com/security/cve/CVE-2012-3535" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1370-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00061.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3535/">CVE-2012-3535</cve>
	<bugzilla href="https://bugzilla.suse.com/777445">SUSE bug 777445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3552</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3552" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3552" ref_url="https://www.suse.com/security/cve/CVE-2012-3552" source="SUSE CVE"/>
    <description>
    Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corruption and system crash) by sending packets to an application that sets socket options during the handling of network traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-3552/">CVE-2012-3552</cve>
	<bugzilla href="https://bugzilla.suse.com/778460">SUSE bug 778460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/795039">SUSE bug 795039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/827565">SUSE bug 827565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3570</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3570" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3570" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3570" ref_url="https://www.suse.com/security/cve/CVE-2012-3570" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000210.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fault and daemon exit) via a crafted client identifier parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3570/">CVE-2012-3570</cve>
	<bugzilla href="https://bugzilla.suse.com/772924">SUSE bug 772924</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3571</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3571" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3571" ref_url="https://www.suse.com/security/cve/CVE-2012-3571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000211.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000212.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html" source="SUSE-SU"/>
    <description>
    ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3571/">CVE-2012-3571</cve>
	<bugzilla href="https://bugzilla.suse.com/772924">SUSE bug 772924</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3817</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3817" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3817" ref_url="https://www.suse.com/security/cve/CVE-2012-3817" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1048-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1048-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000233.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3817/">CVE-2012-3817</cve>
	<bugzilla href="https://bugzilla.suse.com/772945">SUSE bug 772945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/792926">SUSE bug 792926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3868</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3868" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3868" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3868" ref_url="https://www.suse.com/security/cve/CVE-2012-3868" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0666-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00077.html" source="SUSE-SU"/>
    <description>
    Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3868/">CVE-2012-3868</cve>
	<bugzilla href="https://bugzilla.suse.com/772946">SUSE bug 772946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/792926">SUSE bug 792926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3954</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3954" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3954" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3954" ref_url="https://www.suse.com/security/cve/CVE-2012-3954" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000211.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000212.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3954/">CVE-2012-3954</cve>
	<bugzilla href="https://bugzilla.suse.com/772924">SUSE bug 772924</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3955</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3955" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3955" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3955" ref_url="https://www.suse.com/security/cve/CVE-2012-3955" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-October/000274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1234-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1252-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html" source="SUSE-SU"/>
    <description>
    ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3955/">CVE-2012-3955</cve>
	<bugzilla href="https://bugzilla.suse.com/780167">SUSE bug 780167</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3956</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3956" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3956" ref_url="https://www.suse.com/security/cve/CVE-2012-3956" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3956/">CVE-2012-3956</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3957</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3957" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3957" ref_url="https://www.suse.com/security/cve/CVE-2012-3957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3957/">CVE-2012-3957</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3958</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3958" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3958" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3958" ref_url="https://www.suse.com/security/cve/CVE-2012-3958" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3958/">CVE-2012-3958</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3959</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3959" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3959" ref_url="https://www.suse.com/security/cve/CVE-2012-3959" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3959/">CVE-2012-3959</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3960</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3960" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3960" ref_url="https://www.suse.com/security/cve/CVE-2012-3960" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-31"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3960/">CVE-2012-3960</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3961</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3961" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3961" ref_url="https://www.suse.com/security/cve/CVE-2012-3961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3961/">CVE-2012-3961</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3962</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3962" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3962" ref_url="https://www.suse.com/security/cve/CVE-2012-3962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly iterate through the characters in a text run, which allows remote attackers to execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3962/">CVE-2012-3962</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3963</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3963" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3963" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3963" ref_url="https://www.suse.com/security/cve/CVE-2012-3963" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3963/">CVE-2012-3963</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3964</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3964" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3964" ref_url="https://www.suse.com/security/cve/CVE-2012-3964" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3964/">CVE-2012-3964</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3965</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3965" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3965" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3965" ref_url="https://www.suse.com/security/cve/CVE-2012-3965" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3965/">CVE-2012-3965</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3966</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3966" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3966" ref_url="https://www.suse.com/security/cve/CVE-2012-3966" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a negative height value in a BMP image within a .ICO file, related to (1) improper handling of the transparency bitmask by the nsICODecoder component and (2) improper processing of the alpha channel by the nsBMPDecoder component.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3966/">CVE-2012-3966</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3967</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3967" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3967" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3967" ref_url="https://www.suse.com/security/cve/CVE-2012-3967" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3967/">CVE-2012-3967</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123968" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3968</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3968" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3968" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3968" ref_url="https://www.suse.com/security/cve/CVE-2012-3968" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via vectors related to deletion of a fragment shader by its accessor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3968/">CVE-2012-3968</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3969</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3969" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3969" ref_url="https://www.suse.com/security/cve/CVE-2012-3969" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via a crafted SVG filter that triggers an incorrect sum calculation, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3969/">CVE-2012-3969</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3970</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3970" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3970" ref_url="https://www.suse.com/security/cve/CVE-2012-3970" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3970/">CVE-2012-3970</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3971</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3971" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3971" ref_url="https://www.suse.com/security/cve/CVE-2012-3971" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the (1) Silf::readClassMap and (2) Pass::readPass functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3971/">CVE-2012-3971</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3972</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3972" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3972" ref_url="https://www.suse.com/security/cve/CVE-2012-3972" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3972/">CVE-2012-3972</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3973</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3973" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3973" ref_url="https://www.suse.com/security/cve/CVE-2012-3973" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
    <description>
    The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3973/">CVE-2012-3973</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3975</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3975" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3975" ref_url="https://www.suse.com/security/cve/CVE-2012-3975" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3975/">CVE-2012-3975</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3976</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3976" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3976" ref_url="https://www.suse.com/security/cve/CVE-2012-3976" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3976/">CVE-2012-3976</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3978</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3978" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3978" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3978" ref_url="https://www.suse.com/security/cve/CVE-2012-3978" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3978/">CVE-2012-3978</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3980</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3980" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3980" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3980" ref_url="https://www.suse.com/security/cve/CVE-2012-3980" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and triggers an eval operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3980/">CVE-2012-3980</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3982</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3982" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3982" ref_url="https://www.suse.com/security/cve/CVE-2012-3982" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3982/">CVE-2012-3982</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3983</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3983" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3983" ref_url="https://www.suse.com/security/cve/CVE-2012-3983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3983/">CVE-2012-3983</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3984</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3984" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3984" ref_url="https://www.suse.com/security/cve/CVE-2012-3984" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3984/">CVE-2012-3984</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3985</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3985" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3985" ref_url="https://www.suse.com/security/cve/CVE-2012-3985" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging initial-origin access after document.domain has been set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3985/">CVE-2012-3985</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3986</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3986" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3986" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3986" ref_url="https://www.suse.com/security/cve/CVE-2012-3986" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3986/">CVE-2012-3986</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3988</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3988" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3988" ref_url="https://www.suse.com/security/cve/CVE-2012-3988" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3988/">CVE-2012-3988</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3989</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3989" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3989" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3989" ref_url="https://www.suse.com/security/cve/CVE-2012-3989" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable during use of the instanceof operator on a JavaScript object, which allows remote attackers to execute arbitrary code or cause a denial of service (assertion failure) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3989/">CVE-2012-3989</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3990</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3990" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3990" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3990" ref_url="https://www.suse.com/security/cve/CVE-2012-3990" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3990/">CVE-2012-3990</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3991</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3991" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3991" ref_url="https://www.suse.com/security/cve/CVE-2012-3991" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3991/">CVE-2012-3991</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3992</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3992" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3992" ref_url="https://www.suse.com/security/cve/CVE-2012-3992" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3992/">CVE-2012-3992</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3993</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3993" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3993" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3993" ref_url="https://www.suse.com/security/cve/CVE-2012-3993" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3993/">CVE-2012-3993</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3994</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3994" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3994" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3994" ref_url="https://www.suse.com/security/cve/CVE-2012-3994" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Object.defineProperty to shadow the top object, and leverages the relationship between top.location and the location property.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3994/">CVE-2012-3994</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3995</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3995" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3995" ref_url="https://www.suse.com/security/cve/CVE-2012-3995" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3995/">CVE-2012-3995</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4024</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4024" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4024" ref_url="https://www.suse.com/security/cve/CVE-2012-4024" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the get_component function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted list file (aka a crafted file for the -ef option).  NOTE: probably in most cases, the list file is a trusted file constructed by the program's user; however, there are some realistic situations in which a list file would be obtained from an untrusted remote source.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4024/">CVE-2012-4024</cve>
	<bugzilla href="https://bugzilla.suse.com/773015">SUSE bug 773015</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480927" comment="squashfs-4.3-1.29 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4025</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4025" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4025" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4025" ref_url="https://www.suse.com/security/cve/CVE-2012-4025" source="SUSE CVE"/>
    <description>
    Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted block_log field in the superblock of a .sqsh file, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4025/">CVE-2012-4025</cve>
	<bugzilla href="https://bugzilla.suse.com/773015">SUSE bug 773015</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480927" comment="squashfs-4.3-1.29 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4179</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4179" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4179" ref_url="https://www.suse.com/security/cve/CVE-2012-4179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4179/">CVE-2012-4179</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4180</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4180" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4180" ref_url="https://www.suse.com/security/cve/CVE-2012-4180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4180/">CVE-2012-4180</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4181</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4181" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4181" ref_url="https://www.suse.com/security/cve/CVE-2012-4181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4181/">CVE-2012-4181</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4182</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4182" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4182" ref_url="https://www.suse.com/security/cve/CVE-2012-4182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4182/">CVE-2012-4182</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4183</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4183" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4183" ref_url="https://www.suse.com/security/cve/CVE-2012-4183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4183/">CVE-2012-4183</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4184</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4184" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4184" ref_url="https://www.suse.com/security/cve/CVE-2012-4184" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4184/">CVE-2012-4184</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4185</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4185" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4185" ref_url="https://www.suse.com/security/cve/CVE-2012-4185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4185/">CVE-2012-4185</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4186</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4186" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4186" ref_url="https://www.suse.com/security/cve/CVE-2012-4186" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4186/">CVE-2012-4186</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4187</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4187" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4187" ref_url="https://www.suse.com/security/cve/CVE-2012-4187" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a certain insPos variable, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and assertion failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4187/">CVE-2012-4187</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4188</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4188" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4188" ref_url="https://www.suse.com/security/cve/CVE-2012-4188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4188/">CVE-2012-4188</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4191</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4191" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4191" ref_url="https://www.suse.com/security/cve/CVE-2012-4191" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16.0.1, and SeaMonkey before 2.13.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4191/">CVE-2012-4191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4192</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4192" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4192" ref_url="https://www.suse.com/security/cve/CVE-2012-4192" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue to CVE-2012-4193.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4192/">CVE-2012-4192</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4193</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4193" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4193" ref_url="https://www.suse.com/security/cve/CVE-2012-4193" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote attackers to bypass the Same Origin Policy and read the properties of a Location object, or execute arbitrary JavaScript code, via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4193/">CVE-2012-4193</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4194</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4194" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4194" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4194" ref_url="https://www.suse.com/security/cve/CVE-2012-4194" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-07-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4194/">CVE-2012-4194</cve>
	<bugzilla href="https://bugzilla.suse.com/786522">SUSE bug 786522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4195</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4195" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4195" ref_url="https://www.suse.com/security/cve/CVE-2012-4195" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and principal in its return value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site, and makes it easier for remote attackers to execute arbitrary JavaScript code by leveraging certain add-on behavior.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-07-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4195/">CVE-2012-4195</cve>
	<bugzilla href="https://bugzilla.suse.com/786522">SUSE bug 786522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4196</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4196" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4196" ref_url="https://www.suse.com/security/cve/CVE-2012-4196" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats certain protection mechanisms for this object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-07-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4196/">CVE-2012-4196</cve>
	<bugzilla href="https://bugzilla.suse.com/786522">SUSE bug 786522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4201</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4201" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4201" ref_url="https://www.suse.com/security/cve/CVE-2012-4201" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 uses an incorrect context during the handling of JavaScript code that sets the location.href property, which allows remote attackers to conduct cross-site scripting (XSS) attacks or read arbitrary files by leveraging a sandboxed add-on.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-06"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4201/">CVE-2012-4201</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4202</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4202" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4202" ref_url="https://www.suse.com/security/cve/CVE-2012-4202" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the image::RasterImage::DrawFrameTo function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4202/">CVE-2012-4202</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4203</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4203" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4203" ref_url="https://www.suse.com/security/cve/CVE-2012-4203" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
    <description>
    The New Tab page in Mozilla Firefox before 17.0 uses a privileged context for execution of JavaScript code by bookmarklets, which allows user-assisted remote attackers to run arbitrary programs by leveraging a javascript: URL in a bookmark.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4203/">CVE-2012-4203</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4204</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4204" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4204" ref_url="https://www.suse.com/security/cve/CVE-2012-4204" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The str_unescape function in the JavaScript engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4204/">CVE-2012-4204</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4205</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4205" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4205" ref_url="https://www.suse.com/security/cve/CVE-2012-4205" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created in sandboxes, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks or obtain sensitive information by leveraging a sandboxed add-on.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4205/">CVE-2012-4205</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4207</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4207" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4207" ref_url="https://www.suse.com/security/cve/CVE-2012-4207" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly handle a ~ (tilde) character in proximity to a chunk delimiter, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4207/">CVE-2012-4207</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4208</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4208" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4208" ref_url="https://www.suse.com/security/cve/CVE-2012-4208" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 does not consider the compartment during property filtering, which allows remote attackers to bypass intended chrome-only restrictions on reading DOM object properties via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4208/">CVE-2012-4208</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4209</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4209" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4209" ref_url="https://www.suse.com/security/cve/CVE-2012-4209" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a binary plugin.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4209/">CVE-2012-4209</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4210</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4210" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4210" ref_url="https://www.suse.com/security/cve/CVE-2012-4210" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
    <description>
    The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not properly restrict the context of HTML markup and Cascading Style Sheets (CSS) token sequences, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted stylesheet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4210/">CVE-2012-4210</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4212</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4212" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4212" ref_url="https://www.suse.com/security/cve/CVE-2012-4212" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4212/">CVE-2012-4212</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4213</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4213" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4213" ref_url="https://www.suse.com/security/cve/CVE-2012-4213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsEditor::FindNextLeafNode function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4213/">CVE-2012-4213</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4214</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4214" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4214" ref_url="https://www.suse.com/security/cve/CVE-2012-4214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-5840.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4214/">CVE-2012-4214</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4215</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4215" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4215" ref_url="https://www.suse.com/security/cve/CVE-2012-4215" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsPlaintextEditor::FireClipboardEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4215/">CVE-2012-4215</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4216</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4216" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4216" ref_url="https://www.suse.com/security/cve/CVE-2012-4216" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4216/">CVE-2012-4216</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4217</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4217" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4217" ref_url="https://www.suse.com/security/cve/CVE-2012-4217" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsViewManager::ProcessPendingUpdates function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4217/">CVE-2012-4217</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4218</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4218" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4218" ref_url="https://www.suse.com/security/cve/CVE-2012-4218" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the BuildTextRunsScanner::BreakSink::SetBreaks function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4218/">CVE-2012-4218</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4244</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4244" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4244" ref_url="https://www.suse.com/security/cve/CVE-2012-4244" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1199-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-4244/">CVE-2012-4244</cve>
	<bugzilla href="https://bugzilla.suse.com/780157">SUSE bug 780157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/792926">SUSE bug 792926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4398</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4398" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4398" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4398" ref_url="https://www.suse.com/security/cve/CVE-2012-4398" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The __request_module function in kernel/kmod.c in the Linux kernel before 3.4 does not set a certain killable attribute, which allows local users to cause a denial of service (memory consumption) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4398/">CVE-2012-4398</cve>
	<bugzilla href="https://bugzilla.suse.com/778463">SUSE bug 778463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/779488">SUSE bug 779488</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4412</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4412" ref_url="https://www.suse.com/security/cve/CVE-2012-4412" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-4412/">CVE-2012-4412</cve>
	<bugzilla href="https://bugzilla.suse.com/779320">SUSE bug 779320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/848783">SUSE bug 848783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920169">SUSE bug 920169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920338">SUSE bug 920338</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4414</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4414" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4414" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4414" ref_url="https://www.suse.com/security/cve/CVE-2012-4414" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.html" source="SUSE-SU"/>
    <description>
    Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to the binary log. NOTE: as of 20130116, Oracle has not commented on claims from a downstream vendor that the fix in MySQL 5.5.29 is incomplete.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4414/">CVE-2012-4414</cve>
	<bugzilla href="https://bugzilla.suse.com/779476">SUSE bug 779476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4433</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4433" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4433" ref_url="https://www.suse.com/security/cve/CVE-2012-4433" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002695.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0828-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00093.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large (1) width or (2) height value in a Portable Pixel Map (ppm) image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4433/">CVE-2012-4433</cve>
	<bugzilla href="https://bugzilla.suse.com/1023636">SUSE bug 1023636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028070">SUSE bug 1028070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089725">SUSE bug 1089725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/789835">SUSE bug 789835</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488895" comment="gegl-0_3-0.3.34-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488896" comment="gegl-0_3-lang-0.3.34-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488897" comment="gegl-devel-0.3.34-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488898" comment="libgegl-0_3-0-0.3.34-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488899" comment="typelib-1_0-Gegl-0_3-0.3.34-1.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4444</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4444" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4444" ref_url="https://www.suse.com/security/cve/CVE-2012-4444" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The ip6_frag_queue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via overlapping IPv6 fragments.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4444/">CVE-2012-4444</cve>
	<bugzilla href="https://bugzilla.suse.com/789831">SUSE bug 789831</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4453</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4453" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4453" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4453" ref_url="https://www.suse.com/security/cve/CVE-2012-4453" source="SUSE CVE"/>
    <description>
    dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4453/">CVE-2012-4453</cve>
	<bugzilla href="https://bugzilla.suse.com/1008340">SUSE bug 1008340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/782734">SUSE bug 782734</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694233" comment="dracut is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481099" comment="dracut-044.2-18.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481100" comment="dracut-fips-044.2-18.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481101" comment="dracut-ima-044.2-18.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4461</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4461" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4461" ref_url="https://www.suse.com/security/cve/CVE-2012-4461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4461/">CVE-2012-4461</cve>
	<bugzilla href="https://bugzilla.suse.com/787821">SUSE bug 787821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4502</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4502" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4502" ref_url="https://www.suse.com/security/cve/CVE-2012-4502" source="SUSE CVE"/>
    <description>
    Multiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a denial of service (crash) via a crafted (1) REQ_SUBNETS_ACCESSED or (2) REQ_CLIENT_ACCESSES command request to the PKL_CommandLength function or crafted (3) RPY_SUBNETS_ACCESSED, (4) RPY_CLIENT_ACCESSES, (5) RPY_CLIENT_ACCESSES_BY_INDEX, or (6) RPY_MANUAL_LIST command reply to the PKL_ReplyLength function, which triggers an out-of-bounds read or buffer overflow.  NOTE: versions 1.27 and 1.28 do not require authentication to exploit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4502/">CVE-2012-4502</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481059" comment="chrony-3.2-9.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4503</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4503" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4503" ref_url="https://www.suse.com/security/cve/CVE-2012-4503" source="SUSE CVE"/>
    <description>
    cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4503/">CVE-2012-4503</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481059" comment="chrony-3.2-9.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4504</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4504" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4504" ref_url="https://www.suse.com/security/cve/CVE-2012-4504" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00065.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4504/">CVE-2012-4504</cve>
	<bugzilla href="https://bugzilla.suse.com/784523">SUSE bug 784523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/795039">SUSE bug 795039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487699" comment="perl-Net-Libproxy-0.4.15-2.42 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480691" comment="libproxy-devel-0.4.15-2.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480692" comment="libproxy1-0.4.15-2.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488930" comment="libproxy1-config-gnome3-0.4.15-2.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488931" comment="libproxy1-networkmanager-0.4.15-2.42 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4508</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4508" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4508" ref_url="https://www.suse.com/security/cve/CVE-2012-4508" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
    <description>
    Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4508/">CVE-2012-4508</cve>
	<bugzilla href="https://bugzilla.suse.com/784192">SUSE bug 784192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4510</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4510" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4510" ref_url="https://www.suse.com/security/cve/CVE-2012-4510" source="SUSE CVE"/>
    <description>
    cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4510/">CVE-2012-4510</cve>
	<bugzilla href="https://bugzilla.suse.com/783488">SUSE bug 783488</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482654" comment="cups-pk-helper-0.2.6-1.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482655" comment="cups-pk-helper-lang-0.2.6-1.36 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4528</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4528" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4528" ref_url="https://www.suse.com/security/cve/CVE-2012-4528" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000429.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1331-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1342-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an invalid part precedes the crafted data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4528/">CVE-2012-4528</cve>
	<bugzilla href="https://bugzilla.suse.com/789393">SUSE bug 789393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/813190">SUSE bug 813190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488116" comment="apache2-mod_security2-2.9.2-1.34 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4530</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4530" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4530" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4530" ref_url="https://www.suse.com/security/cve/CVE-2012-4530" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4530/">CVE-2012-4530</cve>
	<bugzilla href="https://bugzilla.suse.com/786013">SUSE bug 786013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841063">SUSE bug 841063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4542</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4542" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4542" ref_url="https://www.suse.com/security/cve/CVE-2012-4542" source="SUSE CVE"/>
    <description>
    block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SG_IO ioctl call that leverages overlapping opcodes.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4542/">CVE-2012-4542</cve>
	<bugzilla href="https://bugzilla.suse.com/807154">SUSE bug 807154</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4564</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4564" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4564" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4564" ref_url="https://www.suse.com/security/cve/CVE-2012-4564" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-January/000333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0187-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00076.html" source="SUSE-SU"/>
    <description>
    ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4564/">CVE-2012-4564</cve>
	<bugzilla href="https://bugzilla.suse.com/781995">SUSE bug 781995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787892">SUSE bug 787892</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791607">SUSE bug 791607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4565</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4565" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4565" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4565" ref_url="https://www.suse.com/security/cve/CVE-2012-4565" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The tcp_illinois_info function in net/ipv4/tcp_illinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcp_congestion_control illinois setting is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) by reading TCP stats.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4565/">CVE-2012-4565</cve>
	<bugzilla href="https://bugzilla.suse.com/787576">SUSE bug 787576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124929" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4929</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4929" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4929" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4929" ref_url="https://www.suse.com/security/cve/CVE-2012-4929" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-October/000289.html" source="SUSE-SU"/>
		<reference ref_id="TID7014254" ref_url="https://www.suse.com/support/kb/doc/?id=7014254" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1420-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0157-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1630-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00005.html" source="SUSE-SU"/>
    <description>
    The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4929/">CVE-2012-4929</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/779952">SUSE bug 779952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/793420">SUSE bug 793420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803004">SUSE bug 803004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/847895">SUSE bug 847895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5134</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5134" ref_url="https://www.suse.com/security/cve/CVE-2012-5134" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0178-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00023.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5134/">CVE-2012-5134</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791234">SUSE bug 791234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/793334">SUSE bug 793334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/795039">SUSE bug 795039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804033">SUSE bug 804033</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5166</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5166" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5166" ref_url="https://www.suse.com/security/cve/CVE-2012-5166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1390-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1390-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1372-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5166/">CVE-2012-5166</cve>
	<bugzilla href="https://bugzilla.suse.com/784602">SUSE bug 784602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/792926">SUSE bug 792926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5468</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5468" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5468" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5468" ref_url="https://www.suse.com/security/cve/CVE-2012-5468" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00017.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5468/">CVE-2012-5468</cve>
	<bugzilla href="https://bugzilla.suse.com/792939">SUSE bug 792939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488882" comment="bogofilter-common-1.2.4-1.40 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488883" comment="bogofilter-db-1.2.4-1.40 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5517</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5517" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5517" ref_url="https://www.suse.com/security/cve/CVE-2012-5517" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact in opportunistic circumstances by using memory that was hot-added by an administrator.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5517/">CVE-2012-5517</cve>
	<bugzilla href="https://bugzilla.suse.com/789235">SUSE bug 789235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5519</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5519" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5519" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5519" ref_url="https://www.suse.com/security/cve/CVE-2012-5519" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html" source="SUSE-SU"/>
    <description>
    CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5519/">CVE-2012-5519</cve>
	<bugzilla href="https://bugzilla.suse.com/1180148">SUSE bug 1180148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/789566">SUSE bug 789566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882905">SUSE bug 882905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924208">SUSE bug 924208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487749" comment="cups-ddk-2.2.7-3.11.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481064" comment="cups-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481065" comment="cups-client-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481066" comment="cups-config-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481067" comment="cups-devel-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481068" comment="libcups2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481069" comment="libcups2-32bit-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481070" comment="libcupscgi1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481071" comment="libcupsimage2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481072" comment="libcupsmime1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481073" comment="libcupsppdc1-2.2.7-3.11.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5532</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5532" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5532" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5532" ref_url="https://www.suse.com/security/cve/CVE-2012-5532" source="SUSE CVE"/>
    <description>
    The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.8-rc1, allows local users to cause a denial of service (daemon exit) via a crafted application that sends a Netlink message. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-2669.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5532/">CVE-2012-5532</cve>
	<bugzilla href="https://bugzilla.suse.com/791605">SUSE bug 791605</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480329" comment="hyper-v-7-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5576</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5576" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5576" ref_url="https://www.suse.com/security/cve/CVE-2012-5576" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000719.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1623-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0123-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00014.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5576/">CVE-2012-5576</cve>
	<bugzilla href="https://bugzilla.suse.com/791372">SUSE bug 791372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488900" comment="gimp-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488901" comment="gimp-devel-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488902" comment="gimp-lang-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488903" comment="gimp-plugins-python-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488904" comment="libgimp-2_0-0-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488905" comment="libgimpui-2_0-0-2.8.22-3.42 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5577</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5577" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5577" ref_url="https://www.suse.com/security/cve/CVE-2012-5577" source="SUSE CVE"/>
    <description>
    Python keyring lib before 0.10 created keyring files with world-readable permissions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5577/">CVE-2012-5577</cve>
	<bugzilla href="https://bugzilla.suse.com/1155575">SUSE bug 1155575</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338839" comment="python3-keyring is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781770" comment="python2-keyring is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5578</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5578" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5578" ref_url="https://www.suse.com/security/cve/CVE-2012-5578" source="SUSE CVE"/>
    <description>
    Python keyring has insecure permissions on new databases allowing world-readable files to be created
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2012-5578/">CVE-2012-5578</cve>
	<bugzilla href="https://bugzilla.suse.com/1155575">SUSE bug 1155575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791482">SUSE bug 791482</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338839" comment="python3-keyring is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781770" comment="python2-keyring is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5611</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5611" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5611" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5611" ref_url="https://www.suse.com/security/cve/CVE-2012-5611" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0013-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1412-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00010.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5611/">CVE-2012-5611</cve>
	<bugzilla href="https://bugzilla.suse.com/792362">SUSE bug 792362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/792444">SUSE bug 792444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798753">SUSE bug 798753</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125612" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5612</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5612" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5612" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5612" ref_url="https://www.suse.com/security/cve/CVE-2012-5612" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5612/">CVE-2012-5612</cve>
	<bugzilla href="https://bugzilla.suse.com/792443">SUSE bug 792443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798753">SUSE bug 798753</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5615</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5615" ref_url="https://www.suse.com/security/cve/CVE-2012-5615" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0743-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html" source="SUSE-SU"/>
    <description>
    Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5615/">CVE-2012-5615</cve>
	<bugzilla href="https://bugzilla.suse.com/792440">SUSE bug 792440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901237">SUSE bug 901237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915913">SUSE bug 915913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5627</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5627" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5627" ref_url="https://www.suse.com/security/cve/CVE-2012-5627" source="SUSE CVE"/>
    <description>
    Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5627/">CVE-2012-5627</cve>
	<bugzilla href="https://bugzilla.suse.com/792679">SUSE bug 792679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5643</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5643" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5643" ref_url="https://www.suse.com/security/cve/CVE-2012-5643" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0327-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0186-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1436-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1443-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00032.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5643/">CVE-2012-5643</cve>
	<bugzilla href="https://bugzilla.suse.com/794954">SUSE bug 794954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/796999">SUSE bug 796999</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488449" comment="squid-4.4-5.3.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5668</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5668" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5668" ref_url="https://www.suse.com/security/cve/CVE-2012-5668" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-January/000331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-January/000332.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0165-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0177-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0189-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5668/">CVE-2012-5668</cve>
	<bugzilla href="https://bugzilla.suse.com/795826">SUSE bug 795826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5669</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5669" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5669" ref_url="https://www.suse.com/security/cve/CVE-2012-5669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-January/000331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0165-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0177-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0189-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html" source="SUSE-SU"/>
    <description>
    The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5669/">CVE-2012-5669</cve>
	<bugzilla href="https://bugzilla.suse.com/795826">SUSE bug 795826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5670</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5670" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5670" ref_url="https://www.suse.com/security/cve/CVE-2012-5670" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0165-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html" source="SUSE-SU"/>
    <description>
    The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5670/">CVE-2012-5670</cve>
	<bugzilla href="https://bugzilla.suse.com/795826">SUSE bug 795826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5688</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5688" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5688" ref_url="https://www.suse.com/security/cve/CVE-2012-5688" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1649-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0666-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00077.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5688/">CVE-2012-5688</cve>
	<bugzilla href="https://bugzilla.suse.com/792926">SUSE bug 792926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335113" comment="bind-chrootenv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335115" comment="bind-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335114" comment="bind-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335112" comment="bind-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634659" comment="libbind9-1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634660" comment="libdns1605 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634661" comment="libirs-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634662" comment="libirs1601 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634663" comment="libisc1606 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634664" comment="libisccc1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634665" comment="libisccfg1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634666" comment="libns1604 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634667" comment="python3-bind is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5689</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5689" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5689" ref_url="https://www.suse.com/security/cve/CVE-2012-5689" source="SUSE CVE"/>
    <description>
    ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5689/">CVE-2012-5689</cve>
	<bugzilla href="https://bugzilla.suse.com/800822">SUSE bug 800822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5783</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5783" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5783" ref_url="https://www.suse.com/security/cve/CVE-2012-5783" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000408.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0622-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0623-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0638-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00053.html" source="SUSE-SU"/>
    <description>
    Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2012-5783/">CVE-2012-5783</cve>
	<bugzilla href="https://bugzilla.suse.com/1132354">SUSE bug 1132354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803332">SUSE bug 803332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803333">SUSE bug 803333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480051" comment="apache-commons-httpclient-3.1-2.46 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5784</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5784" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5784" ref_url="https://www.suse.com/security/cve/CVE-2012-5784" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005514.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1373-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005517.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00022.html" source="SUSE-SU"/>
    <description>
    Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2012-5784/">CVE-2012-5784</cve>
	<bugzilla href="https://bugzilla.suse.com/1134598">SUSE bug 1134598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334475" comment="axis is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490144" comment="axis-1.4-5.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5829</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5829" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5829" ref_url="https://www.suse.com/security/cve/CVE-2012-5829" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5829/">CVE-2012-5829</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5830</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5830" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5830" ref_url="https://www.suse.com/security/cve/CVE-2012-5830" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 on Mac OS X allows remote attackers to execute arbitrary code via an HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-5830/">CVE-2012-5830</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5833</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5833" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5833" ref_url="https://www.suse.com/security/cve/CVE-2012-5833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The texImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via function calls involving certain values of the level parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5833/">CVE-2012-5833</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5835</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5835" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5835" ref_url="https://www.suse.com/security/cve/CVE-2012-5835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via crafted data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5835/">CVE-2012-5835</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5836</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5836" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5836" ref_url="https://www.suse.com/security/cve/CVE-2012-5836" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving the setting of Cascading Style Sheets (CSS) properties in conjunction with SVG text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5836/">CVE-2012-5836</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5837</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5837" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5837" ref_url="https://www.suse.com/security/cve/CVE-2012-5837" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5837/">CVE-2012-5837</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5838</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5838" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5838" ref_url="https://www.suse.com/security/cve/CVE-2012-5838" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The copyTexImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via large image dimensions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5838/">CVE-2012-5838</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5839</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5839" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5839" ref_url="https://www.suse.com/security/cve/CVE-2012-5839" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the gfxShapedWord::CompressedGlyph::IsClusterStart function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5839/">CVE-2012-5839</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5840</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5840" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5840" ref_url="https://www.suse.com/security/cve/CVE-2012-5840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4214.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5840/">CVE-2012-5840</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5841</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5841" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5841" ref_url="https://www.suse.com/security/cve/CVE-2012-5841" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 implement cross-origin wrappers with a filtering behavior that does not properly restrict write actions, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5841/">CVE-2012-5841</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5842</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5842" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5842" ref_url="https://www.suse.com/security/cve/CVE-2012-5842" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5842/">CVE-2012-5842</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5843</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5843" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5843" ref_url="https://www.suse.com/security/cve/CVE-2012-5843" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5843/">CVE-2012-5843</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6128</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6128" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6128" ref_url="https://www.suse.com/security/cve/CVE-2012-6128" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00115.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-6128/">CVE-2012-6128</cve>
	<bugzilla href="https://bugzilla.suse.com/803347">SUSE bug 803347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489039" comment="openconnect-7.08-4.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489040" comment="openconnect-devel-7.08-4.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489041" comment="openconnect-lang-7.08-4.26 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6136</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6136" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6136" ref_url="https://www.suse.com/security/cve/CVE-2012-6136" source="SUSE CVE"/>
    <description>
    tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-6136/">CVE-2012-6136</cve>
	<bugzilla href="https://bugzilla.suse.com/1160900">SUSE bug 1160900</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338840" comment="tuned is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6152</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6152" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6152" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6152" ref_url="https://www.suse.com/security/cve/CVE-2012-6152" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service (application crash) via crafted byte sequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-6152/">CVE-2012-6152</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6536</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6536" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6536" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6536" ref_url="https://www.suse.com/security/cve/CVE-2012-6536" source="SUSE CVE"/>
    <description>
    net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not verify that the actual Netlink message length is consistent with a certain header field, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability and providing a (1) new or (2) updated state.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6536/">CVE-2012-6536</cve>
	<bugzilla href="https://bugzilla.suse.com/809889">SUSE bug 809889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6537</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6537" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6537" ref_url="https://www.suse.com/security/cve/CVE-2012-6537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6537/">CVE-2012-6537</cve>
	<bugzilla href="https://bugzilla.suse.com/809889">SUSE bug 809889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6538</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6538" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6538" ref_url="https://www.suse.com/security/cve/CVE-2012-6538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The copy_to_user_auth function in net/xfrm/xfrm_user.c in the Linux kernel before 3.6 uses an incorrect C library function for copying a string, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-13"/>
	<updated date="2023-05-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6538/">CVE-2012-6538</cve>
	<bugzilla href="https://bugzilla.suse.com/809889">SUSE bug 809889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6539</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6539" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6539" ref_url="https://www.suse.com/security/cve/CVE-2012-6539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The dev_ifconf function in net/socket.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6539/">CVE-2012-6539</cve>
	<bugzilla href="https://bugzilla.suse.com/809891">SUSE bug 809891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6542</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6542" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6542" ref_url="https://www.suse.com/security/cve/CVE-2012-6542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain circumstances, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that leverages an uninitialized pointer argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6542/">CVE-2012-6542</cve>
	<bugzilla href="https://bugzilla.suse.com/809894">SUSE bug 809894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6544</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6544" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6544" ref_url="https://www.suse.com/security/cve/CVE-2012-6544" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the (1) L2CAP or (2) HCI implementation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6544/">CVE-2012-6544</cve>
	<bugzilla href="https://bugzilla.suse.com/809898">SUSE bug 809898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6545</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6545" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6545" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6545" ref_url="https://www.suse.com/security/cve/CVE-2012-6545" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6545/">CVE-2012-6545</cve>
	<bugzilla href="https://bugzilla.suse.com/809899">SUSE bug 809899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6546</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6546" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6546" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6546" ref_url="https://www.suse.com/security/cve/CVE-2012-6546" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6546/">CVE-2012-6546</cve>
	<bugzilla href="https://bugzilla.suse.com/809900">SUSE bug 809900</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6547</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6547" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6547" ref_url="https://www.suse.com/security/cve/CVE-2012-6547" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The __tun_chr_ioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6547/">CVE-2012-6547</cve>
	<bugzilla href="https://bugzilla.suse.com/809901">SUSE bug 809901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6548</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6548" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6548" ref_url="https://www.suse.com/security/cve/CVE-2012-6548" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The udf_encode_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6548/">CVE-2012-6548</cve>
	<bugzilla href="https://bugzilla.suse.com/809902">SUSE bug 809902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6549</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6549" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6549" ref_url="https://www.suse.com/security/cve/CVE-2012-6549" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The isofs_export_encode_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6549/">CVE-2012-6549</cve>
	<bugzilla href="https://bugzilla.suse.com/809903">SUSE bug 809903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6647</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6647" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6647" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6647" ref_url="https://www.suse.com/security/cve/CVE-2012-6647" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00022.html" source="SUSE-SU"/>
    <description>
    The futex_wait_requeue_pi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex addresses, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted FUTEX_WAIT_REQUEUE_PI command.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-6647/">CVE-2012-6647</cve>
	<bugzilla href="https://bugzilla.suse.com/878289">SUSE bug 878289</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6657</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6657" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6657" ref_url="https://www.suse.com/security/cve/CVE-2012-6657" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
    <description>
    The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial of service (system crash) by leveraging the ability to create a raw socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-6657/">CVE-2012-6657</cve>
	<bugzilla href="https://bugzilla.suse.com/896779">SUSE bug 896779</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6689</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6689" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6689" ref_url="https://www.suse.com/security/cve/CVE-2012-6689" source="SUSE CVE"/>
    <description>
    The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate the dst_pid field, which allows local users to have an unspecified impact by spoofing Netlink messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6689/">CVE-2012-6689</cve>
	<bugzilla href="https://bugzilla.suse.com/920170">SUSE bug 920170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6701</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6701" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6701" ref_url="https://www.suse.com/security/cve/CVE-2012-6701" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
    <description>
    Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6701/">CVE-2012-6701</cve>
	<bugzilla href="https://bugzilla.suse.com/969354">SUSE bug 969354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969355">SUSE bug 969355</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6702</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6702" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6702" ref_url="https://www.suse.com/security/cve/CVE-2012-6702" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0483-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00071.html" source="SUSE-SU"/>
    <description>
    Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2012-6702/">CVE-2012-6702</cve>
	<bugzilla href="https://bugzilla.suse.com/983215">SUSE bug 983215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983216">SUSE bug 983216</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6703</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6703" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6703" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6703" ref_url="https://www.suse.com/security/cve/CVE-2012-6703" source="SUSE CVE"/>
    <description>
    Integer overflow in the snd_compr_allocate_buffer function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.6-rc6-next-20120917 allows local users to cause a denial of service (insufficient memory allocation) or possibly have unspecified other impact via a crafted SNDRV_COMPRESS_SET_PARAMS ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6703/">CVE-2012-6703</cve>
	<bugzilla href="https://bugzilla.suse.com/986811">SUSE bug 986811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986941">SUSE bug 986941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6704</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6704" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6704" ref_url="https://www.suse.com/security/cve/CVE-2012-6704" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
    <description>
    The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6704/">CVE-2012-6704</cve>
	<bugzilla href="https://bugzilla.suse.com/1013531">SUSE bug 1013531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013542">SUSE bug 1013542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6706</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6706" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6706" ref_url="https://www.suse.com/security/cve/CVE-2012-6706" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1716-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0809-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0862-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0863-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1658-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00062.html" source="SUSE-SU"/>
    <description>
    A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the "DestPos" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6706/">CVE-2012-6706</cve>
	<bugzilla href="https://bugzilla.suse.com/1045315">SUSE bug 1045315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1045490">SUSE bug 1045490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083915">SUSE bug 1083915</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6708</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6708" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6708" ref_url="https://www.suse.com/security/cve/CVE-2012-6708" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006630.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html" source="SUSE-SU"/>
    <description>
    jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '&lt;' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '&lt;' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2012-6708/">CVE-2012-6708</cve>
	<bugzilla href="https://bugzilla.suse.com/1111661">SUSE bug 1111661</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009493051" comment="libruby2_5-2_5-2.5.7-4.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009493052" comment="ruby2.5-2.5.7-4.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009493053" comment="ruby2.5-devel-2.5.7-4.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009493054" comment="ruby2.5-devel-extra-2.5.7-4.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009493055" comment="ruby2.5-stdlib-2.5.7-4.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6711</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6711" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6711" ref_url="https://www.suse.com/security/cve/CVE-2012-6711" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006142.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6711/">CVE-2012-6711</cve>
	<bugzilla href="https://bugzilla.suse.com/1138676">SUSE bug 1138676</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334330" comment="bash is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659638" comment="bash-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337667" comment="bash-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337715" comment="bash-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659639" comment="libreadline7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659640" comment="libreadline7-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337673" comment="readline-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337669" comment="readline-doc is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6712</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6712" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6712" ref_url="https://www.suse.com/security/cve/CVE-2012-6712" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 3.4, a buffer overflow occurs in drivers/net/wireless/iwlwifi/iwl-agn-sta.c, which will cause at least memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6712/">CVE-2012-6712</cve>
	<bugzilla href="https://bugzilla.suse.com/1143176">SUSE bug 1143176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0166</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0166" ref_url="https://www.suse.com/security/cve/CVE-2013-0166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0549-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0549-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0337-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0339-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0166/">CVE-2013-0166</cve>
	<bugzilla href="https://bugzilla.suse.com/802648">SUSE bug 802648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802746">SUSE bug 802746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/813366">SUSE bug 813366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821818">SUSE bug 821818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/833408">SUSE bug 833408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0169</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0169" ref_url="https://www.suse.com/security/cve/CVE-2013-0169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0549-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0549-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001094.html" source="SUSE-SU"/>
		<reference ref_id="TID7017793" ref_url="https://www.suse.com/support/kb/doc/?id=7017793" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0337-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0339-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0169/">CVE-2013-0169</cve>
	<bugzilla href="https://bugzilla.suse.com/1070148">SUSE bug 1070148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103036">SUSE bug 1103036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103597">SUSE bug 1103597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802184">SUSE bug 802184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802648">SUSE bug 802648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802746">SUSE bug 802746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804654">SUSE bug 804654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/809839">SUSE bug 809839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/813366">SUSE bug 813366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/813939">SUSE bug 813939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821818">SUSE bug 821818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977584">SUSE bug 977584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977616">SUSE bug 977616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984977">SUSE bug 984977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0179</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0179" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0179" ref_url="https://www.suse.com/security/cve/CVE-2013-0179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0951-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00041.html" source="SUSE-SU"/>
    <description>
    The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0179/">CVE-2013-0179</cve>
	<bugzilla href="https://bugzilla.suse.com/798458">SUSE bug 798458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334021" comment="memcached is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335437" comment="memcached-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488250" comment="memcached-1.5.6-2.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488251" comment="memcached-devel-1.5.6-2.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0211</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0211" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0211" ref_url="https://www.suse.com/security/cve/CVE-2013-0211" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001328.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0568-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service (crash) via unspecified vectors, which triggers an improper conversion between unsigned and signed types, leading to a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0211/">CVE-2013-0211</cve>
	<bugzilla href="https://bugzilla.suse.com/800024">SUSE bug 800024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979005">SUSE bug 979005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0216</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0216" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0216" ref_url="https://www.suse.com/security/cve/CVE-2013-0216" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (loop) by triggering ring pointer corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0216/">CVE-2013-0216</cve>
	<bugzilla href="https://bugzilla.suse.com/800280">SUSE bug 800280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/800801">SUSE bug 800801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801178">SUSE bug 801178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841063">SUSE bug 841063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0217</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0217" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0217" ref_url="https://www.suse.com/security/cve/CVE-2013-0217" source="SUSE CVE"/>
    <description>
    Memory leak in drivers/net/xen-netback/netback.c in the Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (memory consumption) by triggering certain error conditions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0217/">CVE-2013-0217</cve>
	<bugzilla href="https://bugzilla.suse.com/800280">SUSE bug 800280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/800801">SUSE bug 800801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801178">SUSE bug 801178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0219</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0219" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0219" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0219" ref_url="https://www.suse.com/security/cve/CVE-2013-0219" source="SUSE CVE"/>
    <description>
    System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0219/">CVE-2013-0219</cve>
	<bugzilla href="https://bugzilla.suse.com/801036">SUSE bug 801036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481381" comment="libipa_hbac-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481382" comment="libipa_hbac0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481383" comment="libsss_certmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481384" comment="libsss_certmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481385" comment="libsss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481386" comment="libsss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481387" comment="libsss_nss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481388" comment="libsss_nss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481389" comment="libsss_simpleifp-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481390" comment="libsss_simpleifp0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481391" comment="python3-sssd-config-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481392" comment="sssd-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481393" comment="sssd-32bit-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481394" comment="sssd-ad-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481395" comment="sssd-dbus-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481396" comment="sssd-ipa-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481397" comment="sssd-krb5-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481398" comment="sssd-krb5-common-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481399" comment="sssd-ldap-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481400" comment="sssd-proxy-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481401" comment="sssd-tools-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481402" comment="sssd-wbclient-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481403" comment="sssd-wbclient-devel-1.16.1-3.18.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0220</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0220" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0220" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0220" ref_url="https://www.suse.com/security/cve/CVE-2013-0220" source="SUSE CVE"/>
    <description>
    The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0220/">CVE-2013-0220</cve>
	<bugzilla href="https://bugzilla.suse.com/801036">SUSE bug 801036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481381" comment="libipa_hbac-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481382" comment="libipa_hbac0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481383" comment="libsss_certmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481384" comment="libsss_certmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481385" comment="libsss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481386" comment="libsss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481387" comment="libsss_nss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481388" comment="libsss_nss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481389" comment="libsss_simpleifp-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481390" comment="libsss_simpleifp0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481391" comment="python3-sssd-config-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481392" comment="sssd-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481393" comment="sssd-32bit-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481394" comment="sssd-ad-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481395" comment="sssd-dbus-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481396" comment="sssd-ipa-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481397" comment="sssd-krb5-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481398" comment="sssd-krb5-common-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481399" comment="sssd-ldap-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481400" comment="sssd-proxy-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481401" comment="sssd-tools-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481402" comment="sssd-wbclient-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481403" comment="sssd-wbclient-devel-1.16.1-3.18.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0221</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0221" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0221" ref_url="https://www.suse.com/security/cve/CVE-2013-0221" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-September/000600.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0233-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0930-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00032.html" source="SUSE-SU"/>
    <description>
    The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1) -d or (2) -M switch, which triggers a stack-based buffer overflow in the alloca function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0221/">CVE-2013-0221</cve>
	<bugzilla href="https://bugzilla.suse.com/798538">SUSE bug 798538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480143" comment="coreutils-8.29-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480144" comment="coreutils-lang-8.29-2.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0222</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0222" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0222" ref_url="https://www.suse.com/security/cve/CVE-2013-0222" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-September/000600.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0233-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0930-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00032.html" source="SUSE-SU"/>
    <description>
    The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a stack-based buffer overflow in the alloca function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0222/">CVE-2013-0222</cve>
	<bugzilla href="https://bugzilla.suse.com/796243">SUSE bug 796243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798538">SUSE bug 798538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798541">SUSE bug 798541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480143" comment="coreutils-8.29-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480144" comment="coreutils-lang-8.29-2.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0223</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0223" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0223" ref_url="https://www.suse.com/security/cve/CVE-2013-0223" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-September/000600.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0233-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0930-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00032.html" source="SUSE-SU"/>
    <description>
    The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0223/">CVE-2013-0223</cve>
	<bugzilla href="https://bugzilla.suse.com/798538">SUSE bug 798538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798541">SUSE bug 798541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480143" comment="coreutils-8.29-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480144" comment="coreutils-lang-8.29-2.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0228</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0228" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0228" ref_url="https://www.suse.com/security/cve/CVE-2013-0228" source="SUSE CVE"/>
    <description>
    The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0228/">CVE-2013-0228</cve>
	<bugzilla href="https://bugzilla.suse.com/801179">SUSE bug 801179</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0240</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0240" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0240" ref_url="https://www.suse.com/security/cve/CVE-2013-0240" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0301-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00046.html" source="SUSE-SU"/>
    <description>
    Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0240/">CVE-2013-0240</cve>
	<bugzilla href="https://bugzilla.suse.com/802409">SUSE bug 802409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/808534">SUSE bug 808534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482702" comment="gnome-online-accounts-devel-3.26.2-3.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482703" comment="libgoa-1_0-0-3.26.2-3.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482704" comment="libgoa-backend-1_0-1-3.26.2-3.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482705" comment="typelib-1_0-Goa-1_0-3.26.2-3.34 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488906" comment="gnome-online-accounts-3.26.2-3.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488907" comment="gnome-online-accounts-lang-3.26.2-3.34 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0242</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0242" ref_url="https://www.suse.com/security/cve/CVE-2013-0242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0242/">CVE-2013-0242</cve>
	<bugzilla href="https://bugzilla.suse.com/801246">SUSE bug 801246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/848783">SUSE bug 848783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0249</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0249" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0249" ref_url="https://www.suse.com/security/cve/CVE-2013-0249" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-0249/">CVE-2013-0249</cve>
	<bugzilla href="https://bugzilla.suse.com/802411">SUSE bug 802411</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0268</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0268" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0268" ref_url="https://www.suse.com/security/cve/CVE-2013-0268" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0268/">CVE-2013-0268</cve>
	<bugzilla href="https://bugzilla.suse.com/802642">SUSE bug 802642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841063">SUSE bug 841063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0271</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0271" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0271" ref_url="https://www.suse.com/security/cve/CVE-2013-0271" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00041.html" source="SUSE-SU"/>
    <description>
    The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0271/">CVE-2013-0271</cve>
	<bugzilla href="https://bugzilla.suse.com/804742">SUSE bug 804742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0272</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0272" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0272" ref_url="https://www.suse.com/security/cve/CVE-2013-0272" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00041.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0272/">CVE-2013-0272</cve>
	<bugzilla href="https://bugzilla.suse.com/804742">SUSE bug 804742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0273</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0273" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0273" ref_url="https://www.suse.com/security/cve/CVE-2013-0273" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00041.html" source="SUSE-SU"/>
    <description>
    sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0273/">CVE-2013-0273</cve>
	<bugzilla href="https://bugzilla.suse.com/804742">SUSE bug 804742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0274</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0274" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0274" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0274" ref_url="https://www.suse.com/security/cve/CVE-2013-0274" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00041.html" source="SUSE-SU"/>
    <description>
    upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service (application crash) by leveraging access to the local network.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0274/">CVE-2013-0274</cve>
	<bugzilla href="https://bugzilla.suse.com/804742">SUSE bug 804742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0287</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0287" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0287" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0287" ref_url="https://www.suse.com/security/cve/CVE-2013-0287" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0559-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00115.html" source="SUSE-SU"/>
    <description>
    The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0287/">CVE-2013-0287</cve>
	<bugzilla href="https://bugzilla.suse.com/809153">SUSE bug 809153</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481381" comment="libipa_hbac-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481382" comment="libipa_hbac0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481383" comment="libsss_certmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481384" comment="libsss_certmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481385" comment="libsss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481386" comment="libsss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481387" comment="libsss_nss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481388" comment="libsss_nss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481389" comment="libsss_simpleifp-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481390" comment="libsss_simpleifp0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481391" comment="python3-sssd-config-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481392" comment="sssd-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481393" comment="sssd-32bit-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481394" comment="sssd-ad-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481395" comment="sssd-dbus-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481396" comment="sssd-ipa-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481397" comment="sssd-krb5-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481398" comment="sssd-krb5-common-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481399" comment="sssd-ldap-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481400" comment="sssd-proxy-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481401" comment="sssd-tools-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481402" comment="sssd-wbclient-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481403" comment="sssd-wbclient-devel-1.16.1-3.18.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0290</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0290" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0290" ref_url="https://www.suse.com/security/cve/CVE-2013-0290" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0951-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00017.html" source="SUSE-SU"/>
    <description>
    The __skb_recv_datagram function in net/core/datagram.c in the Linux kernel before 3.8 does not properly handle the MSG_PEEK flag with zero-length data, which allows local users to cause a denial of service (infinite loop and system hang) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0290/">CVE-2013-0290</cve>
	<bugzilla href="https://bugzilla.suse.com/803931">SUSE bug 803931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0292</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0292" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0292" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0292" ref_url="https://www.suse.com/security/cve/CVE-2013-0292" source="SUSE CVE"/>
    <description>
    The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0292/">CVE-2013-0292</cve>
	<bugzilla href="https://bugzilla.suse.com/792095">SUSE bug 792095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804392">SUSE bug 804392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480190" comment="dbus-1-glib-0.108-1.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480191" comment="dbus-1-glib-32bit-0.108-1.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480192" comment="dbus-1-glib-devel-0.108-1.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480193" comment="dbus-1-glib-tool-0.108-1.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0309</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0309" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0309" ref_url="https://www.suse.com/security/cve/CVE-2013-0309" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
    <description>
    arch/x86/include/asm/pgtable.h in the Linux kernel before 3.6.2, when transparent huge pages are used, does not properly support PROT_NONE memory regions, which allows local users to cause a denial of service (system crash) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0309/">CVE-2013-0309</cve>
	<bugzilla href="https://bugzilla.suse.com/804652">SUSE bug 804652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841063">SUSE bug 841063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0310</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0310" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0310" ref_url="https://www.suse.com/security/cve/CVE-2013-0310" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The cipso_v4_validate function in net/ipv4/cipso_ipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an IPOPT_CIPSO IP_OPTIONS setsockopt system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0310/">CVE-2013-0310</cve>
	<bugzilla href="https://bugzilla.suse.com/1133087">SUSE bug 1133087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804653">SUSE bug 804653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0311</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0311" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0311" ref_url="https://www.suse.com/security/cve/CVE-2013-0311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0311/">CVE-2013-0311</cve>
	<bugzilla href="https://bugzilla.suse.com/804656">SUSE bug 804656</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0338</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0338" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0338" ref_url="https://www.suse.com/security/cve/CVE-2013-0338" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000442.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0552-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0555-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00114.html" source="SUSE-SU"/>
    <description>
    libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0338/">CVE-2013-0338</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/805233">SUSE bug 805233</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0343</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0343" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0343" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0343" ref_url="https://www.suse.com/security/cve/CVE-2013-0343" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000880.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0343/">CVE-2013-0343</cve>
	<bugzilla href="https://bugzilla.suse.com/805226">SUSE bug 805226</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0349</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0349" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0349" ref_url="https://www.suse.com/security/cve/CVE-2013-0349" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0349/">CVE-2013-0349</cve>
	<bugzilla href="https://bugzilla.suse.com/805227">SUSE bug 805227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0743</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0743" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0743" ref_url="https://www.suse.com/security/cve/CVE-2013-0743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA at the suggestion of the CVE project team.  The candidate had been associated with a correct report of a security problem, but not a problem that is categorized as a vulnerability within CVE.  Compromised or unauthorized SSL certificates are not within CVE's scope.  Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0743/">CVE-2013-0743</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0744</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0744" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0744" ref_url="https://www.suse.com/security/cve/CVE-2013-0744" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the TableBackgroundPainter::TableBackgroundData::Destroy function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an HTML document with a table containing many columns and column groups.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0744/">CVE-2013-0744</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0745</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0745" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0745" ref_url="https://www.suse.com/security/cve/CVE-2013-0745" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The AutoWrapperChanger class in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly interact with garbage collection, which allows remote attackers to execute arbitrary code via a crafted HTML document referencing JavaScript objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0745/">CVE-2013-0745</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0746</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0746" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0746" ref_url="https://www.suse.com/security/cve/CVE-2013-0746" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 do not properly implement quickstubs that use the jsval data type for their return values, which allows remote attackers to execute arbitrary code or cause a denial of service (compartment mismatch and application crash) via crafted JavaScript code that is not properly handled during garbage collection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0746/">CVE-2013-0746</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0747</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0747" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0747" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0747" ref_url="https://www.suse.com/security/cve/CVE-2013-0747" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The gPluginHandler.handleEvent function in the plugin handler in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly enforce the Same Origin Policy, which allows remote attackers to conduct clickjacking attacks via crafted JavaScript code that listens for a mutation event.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0747/">CVE-2013-0747</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0748</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0748" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0748" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0748" ref_url="https://www.suse.com/security/cve/CVE-2013-0748" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The XBL.__proto__.toString implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 makes it easier for remote attackers to bypass the ASLR protection mechanism by calling the toString function of an XBL object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-18"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0748/">CVE-2013-0748</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0749</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0749" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0749" ref_url="https://www.suse.com/security/cve/CVE-2013-0749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0749/">CVE-2013-0749</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0750</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0750" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0750" ref_url="https://www.suse.com/security/cve/CVE-2013-0750" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted string concatenation, leading to improper memory allocation and a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0750/">CVE-2013-0750</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0751</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0751" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0751" ref_url="https://www.suse.com/security/cve/CVE-2013-0751" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 18.0 on Android and SeaMonkey before 2.15 do not restrict a touch event to a single IFRAME element, which allows remote attackers to obtain sensitive information or possibly conduct cross-site scripting (XSS) attacks via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0751/">CVE-2013-0751</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0752</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0752" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0752" ref_url="https://www.suse.com/security/cve/CVE-2013-0752" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XBL file with multiple bindings that have SVG content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0752/">CVE-2013-0752</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0753</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0753" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0753" ref_url="https://www.suse.com/security/cve/CVE-2013-0753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via crafted web content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0753/">CVE-2013-0753</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0754</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0754" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0754" ref_url="https://www.suse.com/security/cve/CVE-2013-0754" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors involving the triggering of garbage collection after memory allocation for listener objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0754/">CVE-2013-0754</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0755</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0755" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0755" ref_url="https://www.suse.com/security/cve/CVE-2013-0755" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozVibrate implementation in the Vibrate library in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors related to the domDoc pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0755/">CVE-2013-0755</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0756</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0756" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0756" ref_url="https://www.suse.com/security/cve/CVE-2013-0756" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the obj_toSource function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted web page referencing JavaScript Proxy objects that are not properly handled during garbage collection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0756/">CVE-2013-0756</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0757</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0757" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0757" ref_url="https://www.suse.com/security/cve/CVE-2013-0757" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not prevent modifications to the prototype of an object, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by referencing Object.prototype.__proto__ in a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0757/">CVE-2013-0757</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0758</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0758" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0758" ref_url="https://www.suse.com/security/cve/CVE-2013-0758" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging improper interaction between plugin objects and SVG elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0758/">CVE-2013-0758</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0760</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0760" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0760" ref_url="https://www.suse.com/security/cve/CVE-2013-0760" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0760/">CVE-2013-0760</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0761</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0761" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0761" ref_url="https://www.suse.com/security/cve/CVE-2013-0761" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::TrackUnionStream::EndTrack implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0761/">CVE-2013-0761</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0762</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0762" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0762" ref_url="https://www.suse.com/security/cve/CVE-2013-0762" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0762/">CVE-2013-0762</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0763</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0763" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0763" ref_url="https://www.suse.com/security/cve/CVE-2013-0763" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to Mesa drivers and a resized WebGL canvas.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0763/">CVE-2013-0763</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0764</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0764" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0764" ref_url="https://www.suse.com/security/cve/CVE-2013-0764" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not ensure thread safety for SSL sessions, which allows remote attackers to execute arbitrary code via crafted data, as demonstrated by e-mail message data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0764/">CVE-2013-0764</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0765</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0765" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0765" ref_url="https://www.suse.com/security/cve/CVE-2013-0765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0765/">CVE-2013-0765</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0766</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0766" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0766" ref_url="https://www.suse.com/security/cve/CVE-2013-0766" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0766/">CVE-2013-0766</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0767</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0767" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0767" ref_url="https://www.suse.com/security/cve/CVE-2013-0767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0767/">CVE-2013-0767</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0768</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0768" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0768" ref_url="https://www.suse.com/security/cve/CVE-2013-0768" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via an HTML document that specifies invalid width and height values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-19"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0768/">CVE-2013-0768</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0769</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0769" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0769" ref_url="https://www.suse.com/security/cve/CVE-2013-0769" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0769/">CVE-2013-0769</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130770" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0770</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0770" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0770" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0770" ref_url="https://www.suse.com/security/cve/CVE-2013-0770" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0770/">CVE-2013-0770</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0771</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0771" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0771" ref_url="https://www.suse.com/security/cve/CVE-2013-0771" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-17"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0771/">CVE-2013-0771</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0772</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0772" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0772" ref_url="https://www.suse.com/security/cve/CVE-2013-0772" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0772/">CVE-2013-0772</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0773</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0773" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0773" ref_url="https://www.suse.com/security/cve/CVE-2013-0773" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent modifications to a prototype, which allows remote attackers to obtain sensitive information from chrome objects or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0773/">CVE-2013-0773</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0774</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0774" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0774" ref_url="https://www.suse.com/security/cve/CVE-2013-0774" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent JavaScript workers from reading the browser-profile directory name, which has unspecified impact and remote attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0774/">CVE-2013-0774</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0775</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0775" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0775" ref_url="https://www.suse.com/security/cve/CVE-2013-0775" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via crafted web script.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0775/">CVE-2013-0775</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0776</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0776" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0776" ref_url="https://www.suse.com/security/cve/CVE-2013-0776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0776/">CVE-2013-0776</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0777</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0777" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0777" ref_url="https://www.suse.com/security/cve/CVE-2013-0777" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0777/">CVE-2013-0777</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0778</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0778" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0778" ref_url="https://www.suse.com/security/cve/CVE-2013-0778" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    The ClusterIterator::NextCluster function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-31"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0778/">CVE-2013-0778</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0779</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0779" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0779" ref_url="https://www.suse.com/security/cve/CVE-2013-0779" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    The nsCodingStateMachine::NextState function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0779/">CVE-2013-0779</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130780" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0780</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0780" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0780" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0780" ref_url="https://www.suse.com/security/cve/CVE-2013-0780" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document that uses Cascading Style Sheets (CSS) -moz-column-* properties.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0780/">CVE-2013-0780</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0781</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0781" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0781" ref_url="https://www.suse.com/security/cve/CVE-2013-0781" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsPrintEngine::CommonPrint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0781/">CVE-2013-0781</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0782</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0782" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0782" ref_url="https://www.suse.com/security/cve/CVE-2013-0782" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0782/">CVE-2013-0782</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0783</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0783" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0783" ref_url="https://www.suse.com/security/cve/CVE-2013-0783" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0783/">CVE-2013-0783</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0787</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0787" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0787" ref_url="https://www.suse.com/security/cve/CVE-2013-0787" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0465-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0466-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0467-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR 17.x before 17.0.4, and SeaMonkey before 2.16.1 allows remote attackers to execute arbitrary code via vectors involving an execCommand call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0787/">CVE-2013-0787</cve>
	<bugzilla href="https://bugzilla.suse.com/808243">SUSE bug 808243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0788</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0788" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0788" ref_url="https://www.suse.com/security/cve/CVE-2013-0788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0788/">CVE-2013-0788</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0789</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0789" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0789" ref_url="https://www.suse.com/security/cve/CVE-2013-0789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0 and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsContentUtils::HoldJSObjects function and the nsAutoPtr class, and other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0789/">CVE-2013-0789</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0791</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0791" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0791" ref_url="https://www.suse.com/security/cve/CVE-2013-0791" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
    <description>
    The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0791/">CVE-2013-0791</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0792</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0792" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0792" ref_url="https://www.suse.com/security/cve/CVE-2013-0792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 20.0 and SeaMonkey before 2.17, when gfx.color_management.enablev4 is used, do not properly handle color profiles during PNG rendering, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a grayscale PNG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0792/">CVE-2013-0792</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0793</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0793" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0793" ref_url="https://www.suse.com/security/cve/CVE-2013-0793" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 do not ensure the correctness of the address bar during history navigation, which allows remote attackers to conduct cross-site scripting (XSS) attacks or phishing attacks by leveraging control over navigation timing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0793/">CVE-2013-0793</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0794</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0794" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0794" ref_url="https://www.suse.com/security/cve/CVE-2013-0794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal dialogs, which allows remote attackers to conduct phishing attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0794/">CVE-2013-0794</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0795</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0795" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0795" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0795" ref_url="https://www.suse.com/security/cve/CVE-2013-0795" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for cloning a protected node, which allows remote attackers to bypass the Same Origin Policy or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0795/">CVE-2013-0795</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0796</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0796" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0796" ref_url="https://www.suse.com/security/cve/CVE-2013-0796" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0796/">CVE-2013-0796</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0800</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0800" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0800" ref_url="https://www.suse.com/security/cve/CVE-2013-0800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to execute arbitrary code via crafted values that trigger attempted use of a (1) negative box boundary or (2) negative box size, leading to an out-of-bounds write operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0800/">CVE-2013-0800</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0801</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0801" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0801" ref_url="https://www.suse.com/security/cve/CVE-2013-0801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0801/">CVE-2013-0801</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130871" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0871</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0871" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0871" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0871" ref_url="https://www.suse.com/security/cve/CVE-2013-0871" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0341-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Race condition in the ptrace functionality in the Linux kernel before 3.7.5 allows local users to gain privileges via a PTRACE_SETREGS ptrace system call in a crafted application, as demonstrated by ptrace_death.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-0871/">CVE-2013-0871</cve>
	<bugzilla href="https://bugzilla.suse.com/804154">SUSE bug 804154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804227">SUSE bug 804227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841063">SUSE bug 841063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0913</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0913" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0913" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0913" ref_url="https://www.suse.com/security/cve/CVE-2013-0913" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-0913/">CVE-2013-0913</cve>
	<bugzilla href="https://bugzilla.suse.com/808829">SUSE bug 808829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130914" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0914</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0914" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0914" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0914" ref_url="https://www.suse.com/security/cve/CVE-2013-0914" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0914/">CVE-2013-0914</cve>
	<bugzilla href="https://bugzilla.suse.com/808827">SUSE bug 808827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1430</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1430" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1430" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1430" ref_url="https://www.suse.com/security/cve/CVE-2013-1430" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005708.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005721.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2013-1430/">CVE-2013-1430</cve>
	<bugzilla href="https://bugzilla.suse.com/1015567">SUSE bug 1015567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/442182">SUSE bug 442182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480650" comment="libpainter0-0.9.6-2.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480651" comment="librfxencode0-0.9.6-2.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480652" comment="xrdp-0.9.6-2.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480653" comment="xrdp-devel-0.9.6-2.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1438</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1438" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1438" ref_url="https://www.suse.com/security/cve/CVE-2013-1438" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a (1) divide-by-zero, (2) infinite loop, or (3) NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-11"/>
	<updated date="2023-09-07"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-1438/">CVE-2013-1438</cve>
	<bugzilla href="https://bugzilla.suse.com/837750">SUSE bug 837750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009476560" comment="libraw1394-11-32bit is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659642" comment="libraw1394 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009476559" comment="libraw1394-11 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009476560" comment="libraw1394-11-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659641" comment="libraw1394-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1439</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1439" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1439" ref_url="https://www.suse.com/security/cve/CVE-2013-1439" source="SUSE CVE"/>
    <description>
    The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-28"/>
	<updated date="2023-09-07"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1439/">CVE-2013-1439</cve>
	<bugzilla href="https://bugzilla.suse.com/837750">SUSE bug 837750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009476560" comment="libraw1394-11-32bit is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659642" comment="libraw1394 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009476559" comment="libraw1394-11 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009476560" comment="libraw1394-11-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659641" comment="libraw1394-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1445</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1445" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1445" ref_url="https://www.suse.com/security/cve/CVE-2013-1445" source="SUSE CVE"/>
    <description>
    The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a child process is created and accesses the PRNG within the same rate-limit period as another process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1445/">CVE-2013-1445</cve>
	<bugzilla href="https://bugzilla.suse.com/846214">SUSE bug 846214</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480899" comment="python3-pycrypto-2.6.1-1.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1447</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1447" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1447" ref_url="https://www.suse.com/security/cve/CVE-2013-1447" source="SUSE CVE"/>
    <description>
    OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1447/">CVE-2013-1447</cve>
	<bugzilla href="https://bugzilla.suse.com/853644">SUSE bug 853644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/853834">SUSE bug 853834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871412">SUSE bug 871412</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1571</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1571" ref_url="https://www.suse.com/security/cve/CVE-2013-1571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1255-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1255-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1263-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021433" ref_url="https://www.suse.com/support/kb/doc/?id=7021433" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1571/">CVE-2013-1571</cve>
	<bugzilla href="https://bugzilla.suse.com/824397">SUSE bug 824397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/825624">SUSE bug 825624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/828665">SUSE bug 828665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/829212">SUSE bug 829212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/829708">SUSE bug 829708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487716" comment="ant-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487720" comment="ant-antlr-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487721" comment="ant-apache-bcel-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487722" comment="ant-apache-bsf-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487723" comment="ant-apache-log4j-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487724" comment="ant-apache-oro-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487725" comment="ant-apache-regexp-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487726" comment="ant-apache-resolver-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487727" comment="ant-commons-logging-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487728" comment="ant-javamail-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487729" comment="ant-jdepend-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487717" comment="ant-jmf-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487730" comment="ant-junit-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487731" comment="ant-manual-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487718" comment="ant-scripts-1.9.10-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487719" comment="ant-swing-1.9.10-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1620</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1620" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1620" ref_url="https://www.suse.com/security/cve/CVE-2013-1620" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
    <description>
    The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1620/">CVE-2013-1620</cve>
	<bugzilla href="https://bugzilla.suse.com/802184">SUSE bug 802184</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1669</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1669" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1669" ref_url="https://www.suse.com/security/cve/CVE-2013-1669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1669/">CVE-2013-1669</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1670</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1670" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1670" ref_url="https://www.suse.com/security/cve/CVE-2013-1670" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1670/">CVE-2013-1670</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1671</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1671" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1671" ref_url="https://www.suse.com/security/cve/CVE-2013-1671" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1671/">CVE-2013-1671</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1672</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1672" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1672" ref_url="https://www.suse.com/security/cve/CVE-2013-1672" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
    <description>
    The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows local users to bypass integrity verification and gain privileges via vectors involving junctions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1672/">CVE-2013-1672</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1673</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1673" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1673" ref_url="https://www.suse.com/security/cve/CVE-2013-1673" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
    <description>
    The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1673/">CVE-2013-1673</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1674</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1674" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1674" ref_url="https://www.suse.com/security/cve/CVE-2013-1674" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1674/">CVE-2013-1674</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1675</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1675" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1675" ref_url="https://www.suse.com/security/cve/CVE-2013-1675" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1675/">CVE-2013-1675</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1676</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1676" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1676" ref_url="https://www.suse.com/security/cve/CVE-2013-1676" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1676/">CVE-2013-1676</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1677</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1677" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1677" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1677" ref_url="https://www.suse.com/security/cve/CVE-2013-1677" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1677/">CVE-2013-1677</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1678</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1678" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1678" ref_url="https://www.suse.com/security/cve/CVE-2013-1678" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1678/">CVE-2013-1678</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131679" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1679</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1679" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1679" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1679" ref_url="https://www.suse.com/security/cve/CVE-2013-1679" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1679/">CVE-2013-1679</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1680</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1680" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1680" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1680" ref_url="https://www.suse.com/security/cve/CVE-2013-1680" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1680/">CVE-2013-1680</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1681</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1681" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1681" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1681" ref_url="https://www.suse.com/security/cve/CVE-2013-1681" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1681/">CVE-2013-1681</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1682</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1682" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1682" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1682" ref_url="https://www.suse.com/security/cve/CVE-2013-1682" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1682/">CVE-2013-1682</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1683</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1683" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1683" ref_url="https://www.suse.com/security/cve/CVE-2013-1683" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1683/">CVE-2013-1683</cve>
	<bugzilla href="https://bugzilla.suse.com/1150035">SUSE bug 1150035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131684" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1684</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1684" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1684" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1684" ref_url="https://www.suse.com/security/cve/CVE-2013-1684" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1684/">CVE-2013-1684</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1685</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1685" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1685" ref_url="https://www.suse.com/security/cve/CVE-2013-1685" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1685/">CVE-2013-1685</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1686</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1686" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1686" ref_url="https://www.suse.com/security/cve/CVE-2013-1686" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1686/">CVE-2013-1686</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1687</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1687" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1687" ref_url="https://www.suse.com/security/cve/CVE-2013-1687" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly restrict XBL user-defined functions, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges, or conduct cross-site scripting (XSS) attacks, via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1687/">CVE-2013-1687</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1688</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1688" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1688" ref_url="https://www.suse.com/security/cve/CVE-2013-1688" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1688/">CVE-2013-1688</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1690</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1690" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1690" ref_url="https://www.suse.com/security/cve/CVE-2013-1690" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1690/">CVE-2013-1690</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1692</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1692" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1692" ref_url="https://www.suse.com/security/cve/CVE-2013-1692" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1692/">CVE-2013-1692</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1693</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1693" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1693" ref_url="https://www.suse.com/security/cve/CVE-2013-1693" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by observing timing differences in execution of filter code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1693/">CVE-2013-1693</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1694</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1694" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1694" ref_url="https://www.suse.com/security/cve/CVE-2013-1694" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1694/">CVE-2013-1694</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1695</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1695" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1695" ref_url="https://www.suse.com/security/cve/CVE-2013-1695" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1695/">CVE-2013-1695</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1696</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1696" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1696" ref_url="https://www.suse.com/security/cve/CVE-2013-1696" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1696/">CVE-2013-1696</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1697</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1697" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1697" ref_url="https://www.suse.com/security/cve/CVE-2013-1697" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly restrict use of DefaultValue for method calls, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers use of a user-defined (1) toString or (2) valueOf method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1697/">CVE-2013-1697</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1698</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1698" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1698" ref_url="https://www.suse.com/security/cve/CVE-2013-1698" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    The getUserMedia permission implementation in Mozilla Firefox before 22.0 references the URL of a top-level document instead of the URL of a specific page, which makes it easier for remote attackers to trick users into permitting camera or microphone access via a crafted web site that uses IFRAME elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1698/">CVE-2013-1698</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1699</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1699" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1699" ref_url="https://www.suse.com/security/cve/CVE-2013-1699" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    The Internationalized Domain Name (IDN) display algorithm in Mozilla Firefox before 22.0 does not properly handle the .com, .name, and .net top-level domains, which allows remote attackers to spoof the address bar via unspecified homograph characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1699/">CVE-2013-1699</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1701</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1701" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1701" ref_url="https://www.suse.com/security/cve/CVE-2013-1701" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1701/">CVE-2013-1701</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1702</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1702" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1702" ref_url="https://www.suse.com/security/cve/CVE-2013-1702" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1702/">CVE-2013-1702</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1704</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1704" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1704" ref_url="https://www.suse.com/security/cve/CVE-2013-1704" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a DOM modification at the time of a SetBody mutation event.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1704/">CVE-2013-1704</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1705</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1705" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1705" ref_url="https://www.suse.com/security/cve/CVE-2013-1705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Certificate Request Message Format (CRMF) request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1705/">CVE-2013-1705</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1708</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1708" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1708" ref_url="https://www.suse.com/security/cve/CVE-2013-1708" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (application crash) via a crafted WAV file that is not properly handled by the nsCString::CharAt function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1708/">CVE-2013-1708</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1709</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1709" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1709" ref_url="https://www.suse.com/security/cve/CVE-2013-1709" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving spoofing a relative location in a previously visited document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1709/">CVE-2013-1709</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1710</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1710" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1710" ref_url="https://www.suse.com/security/cve/CVE-2013-1710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting (XSS) attacks via vectors related to Certificate Request Message Format (CRMF) request generation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1710/">CVE-2013-1710</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1711</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1711" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1711" ref_url="https://www.suse.com/security/cve/CVE-2013-1711" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging access to an unprivileged object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1711/">CVE-2013-1711</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1713</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1713" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1713" ref_url="https://www.suse.com/security/cve/CVE-2013-1713" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1713/">CVE-2013-1713</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1714</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1714" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1714" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1714" ref_url="https://www.suse.com/security/cve/CVE-2013-1714" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not properly restrict XMLHttpRequest calls, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1714/">CVE-2013-1714</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1717</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1717" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1717" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1717" ref_url="https://www.suse.com/security/cve/CVE-2013-1717" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging a download to a fixed pathname or other predictable pathname.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1717/">CVE-2013-1717</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1718</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1718" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1718" ref_url="https://www.suse.com/security/cve/CVE-2013-1718" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1718/">CVE-2013-1718</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1719</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1719" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1719" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1719" ref_url="https://www.suse.com/security/cve/CVE-2013-1719" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1719/">CVE-2013-1719</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1720</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1720" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1720" ref_url="https://www.suse.com/security/cve/CVE-2013-1720" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 does not properly maintain the state of the insertion-mode stack for template elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer over-read) by triggering use of this stack in its empty state.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1720/">CVE-2013-1720</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1721</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1721" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1721" ref_url="https://www.suse.com/security/cve/CVE-2013-1721" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 24.0 and SeaMonkey before 2.21, allows remote attackers to execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1721/">CVE-2013-1721</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1722</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1722" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1722" ref_url="https://www.suse.com/security/cve/CVE-2013-1722" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving stylesheet cloning.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1722/">CVE-2013-1722</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1723</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1723" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1723" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1723" ref_url="https://www.suse.com/security/cve/CVE-2013-1723" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key messages after destruction by a dispatched event listener, which allows remote attackers to cause a denial of service (application crash) by leveraging incorrect event usage after widget-memory reallocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1723/">CVE-2013-1723</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1724</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1724" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1724" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1724" ref_url="https://www.suse.com/security/cve/CVE-2013-1724" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a destroyed SELECT element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1724/">CVE-2013-1724</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1725</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1725" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1725" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1725" ref_url="https://www.suse.com/security/cve/CVE-2013-1725" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not ensure that initialization occurs for JavaScript objects with compartments, which allows remote attackers to execute arbitrary code by leveraging incorrect scope handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1725/">CVE-2013-1725</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1728</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1728" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1728" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1728" ref_url="https://www.suse.com/security/cve/CVE-2013-1728" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, when Valgrind mode is used, does not properly initialize memory, which makes it easier for remote attackers to obtain sensitive information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-03"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1728/">CVE-2013-1728</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1729</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1729" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1729" ref_url="https://www.suse.com/security/cve/CVE-2013-1729" source="SUSE CVE"/>
    <description>
    The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1729/">CVE-2013-1729</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1730</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1730" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1730" ref_url="https://www.suse.com/security/cve/CVE-2013-1730" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly handle movement of XBL-backed nodes between documents, which allows remote attackers to execute arbitrary code or cause a denial of service (JavaScript compartment mismatch, or assertion failure and application exit) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1730/">CVE-2013-1730</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1731</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1731" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1731" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1731" ref_url="https://www.suse.com/security/cve/CVE-2013-1731" source="SUSE CVE"/>
    <description>
    Untrusted search path vulnerability in the GL tracing functionality in Mozilla Firefox before 24.0 on Android allows attackers to execute arbitrary code via a Trojan horse .so file in a world-writable directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1731/">CVE-2013-1731</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1732</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1732" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1732" ref_url="https://www.suse.com/security/cve/CVE-2013-1732" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via crafted use of lists and floats within a multi-column layout.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1732/">CVE-2013-1732</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1735</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1735" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1735" ref_url="https://www.suse.com/security/cve/CVE-2013-1735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via vectors related to image-document scrolling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1735/">CVE-2013-1735</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1736</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1736" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1736" ref_url="https://www.suse.com/security/cve/CVE-2013-1736" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to improperly establishing parent-child relationships of range-request nodes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1736/">CVE-2013-1736</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1737</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1737" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1737" ref_url="https://www.suse.com/security/cve/CVE-2013-1737" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1737/">CVE-2013-1737</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1738</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1738" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1738" ref_url="https://www.suse.com/security/cve/CVE-2013-1738" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code by leveraging incorrect garbage collection in situations involving default compartments and frame-chain restoration.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1738/">CVE-2013-1738</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1739</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1739" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1739" ref_url="https://www.suse.com/security/cve/CVE-2013-1739" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1539-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1542-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1739/">CVE-2013-1739</cve>
	<bugzilla href="https://bugzilla.suse.com/842979">SUSE bug 842979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1740</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1740" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1740" ref_url="https://www.suse.com/security/cve/CVE-2013-1740" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html" source="SUSE-SU"/>
    <description>
    The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1740/">CVE-2013-1740</cve>
	<bugzilla href="https://bugzilla.suse.com/859055">SUSE bug 859055</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1741</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1741" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1741" ref_url="https://www.suse.com/security/cve/CVE-2013-1741" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1732-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1741/">CVE-2013-1741</cve>
	<bugzilla href="https://bugzilla.suse.com/850148">SUSE bug 850148</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1752</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1752" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1752" ref_url="https://www.suse.com/security/cve/CVE-2013-1752" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1006-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0380-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0498-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 "Independently Fixable" in the CVE Counting Decisions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-1752/">CVE-2013-1752</cve>
	<bugzilla href="https://bugzilla.suse.com/856835">SUSE bug 856835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/856836">SUSE bug 856836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/863741">SUSE bug 863741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885882">SUSE bug 885882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898572">SUSE bug 898572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912739">SUSE bug 912739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1753</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1753" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1753" ref_url="https://www.suse.com/security/cve/CVE-2013-1753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0380-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0498-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00020.html" source="SUSE-SU"/>
    <description>
    The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2013-1753/">CVE-2013-1753</cve>
	<bugzilla href="https://bugzilla.suse.com/856835">SUSE bug 856835</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1762</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1762" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1762" ref_url="https://www.suse.com/security/cve/CVE-2013-1762" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0709-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000431.html" source="SUSE-SU"/>
    <description>
    stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1762/">CVE-2013-1762</cve>
	<bugzilla href="https://bugzilla.suse.com/807440">SUSE bug 807440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807450">SUSE bug 807450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488296" comment="stunnel-5.44-1.29 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1763</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1763" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1763" ref_url="https://www.suse.com/security/cve/CVE-2013-1763" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
    <description>
    Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1763/">CVE-2013-1763</cve>
	<bugzilla href="https://bugzilla.suse.com/805633">SUSE bug 805633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807436">SUSE bug 807436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1767</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1767" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1767" ref_url="https://www.suse.com/security/cve/CVE-2013-1767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the shmem_remount_fs function in mm/shmem.c in the Linux kernel before 3.7.10 allows local users to gain privileges or cause a denial of service (system crash) by remounting a tmpfs filesystem without specifying a required mpol (aka mempolicy) mount option.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1767/">CVE-2013-1767</cve>
	<bugzilla href="https://bugzilla.suse.com/806138">SUSE bug 806138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807436">SUSE bug 807436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1772</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1772" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1772" ref_url="https://www.suse.com/security/cve/CVE-2013-1772" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The log_prefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service (buffer overflow and system crash) by leveraging /dev/kmsg write access and triggering a call_console_drivers function call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1772/">CVE-2013-1772</cve>
	<bugzilla href="https://bugzilla.suse.com/806238">SUSE bug 806238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807441">SUSE bug 807441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1773</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1773" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1773" ref_url="https://www.suse.com/security/cve/CVE-2013-1773" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF-8 to UTF-16 conversion.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1773/">CVE-2013-1773</cve>
	<bugzilla href="https://bugzilla.suse.com/806977">SUSE bug 806977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807452">SUSE bug 807452</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1774</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1774" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1774" ref_url="https://www.suse.com/security/cve/CVE-2013-1774" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1474-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000607.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1773-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00106.html" source="SUSE-SU"/>
    <description>
    The chase_port function in drivers/usb/serial/io_ti.c in the Linux kernel before 3.7.4 allows local users to cause a denial of service (NULL pointer dereference and system crash) via an attempted /dev/ttyUSB read or write operation on a disconnected Edgeport USB serial converter.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1774/">CVE-2013-1774</cve>
	<bugzilla href="https://bugzilla.suse.com/806976">SUSE bug 806976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807455">SUSE bug 807455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1775</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1775" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1775" ref_url="https://www.suse.com/security/cve/CVE-2013-1775" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000613.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000614.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00074.html" source="SUSE-SU"/>
    <description>
    sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1775/">CVE-2013-1775</cve>
	<bugzilla href="https://bugzilla.suse.com/806919">SUSE bug 806919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806921">SUSE bug 806921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/815325">SUSE bug 815325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/845568">SUSE bug 845568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334585" comment="sudo is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481659" comment="sudo-1.8.22-4.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481660" comment="sudo-devel-1.8.22-4.3.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1776</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1776" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1776" ref_url="https://www.suse.com/security/cve/CVE-2013-1776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000613.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000614.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00074.html" source="SUSE-SU"/>
    <description>
    sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal.  NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1776/">CVE-2013-1776</cve>
	<bugzilla href="https://bugzilla.suse.com/806921">SUSE bug 806921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/817349">SUSE bug 817349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/817350">SUSE bug 817350</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659701" comment="sudo-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481659" comment="sudo-1.8.22-4.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481660" comment="sudo-devel-1.8.22-4.3.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1788</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1788" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1788" ref_url="https://www.suse.com/security/cve/CVE-2013-1788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000403.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00051.html" source="SUSE-SU"/>
    <description>
    poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in (1) splash/Splash.cc, (2) poppler/Function.cc, and (3) poppler/Stream.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1788/">CVE-2013-1788</cve>
	<bugzilla href="https://bugzilla.suse.com/806793">SUSE bug 806793</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1789</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1789" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1789" ref_url="https://www.suse.com/security/cve/CVE-2013-1789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000403.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00051.html" source="SUSE-SU"/>
    <description>
    splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1789/">CVE-2013-1789</cve>
	<bugzilla href="https://bugzilla.suse.com/806793">SUSE bug 806793</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1790</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1790" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1790" ref_url="https://www.suse.com/security/cve/CVE-2013-1790" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000403.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00051.html" source="SUSE-SU"/>
    <description>
    poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1790/">CVE-2013-1790</cve>
	<bugzilla href="https://bugzilla.suse.com/806793">SUSE bug 806793</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1792</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1792" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1792" ref_url="https://www.suse.com/security/cve/CVE-2013-1792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Race condition in the install_user_keyrings function in security/keys/process_keys.c in the Linux kernel before 3.8.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) via crafted keyctl system calls that trigger keyring operations in simultaneous threads.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1792/">CVE-2013-1792</cve>
	<bugzilla href="https://bugzilla.suse.com/807428">SUSE bug 807428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/808358">SUSE bug 808358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1796</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1796" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1796" ref_url="https://www.suse.com/security/cve/CVE-2013-1796" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment during an MSR_KVM_SYSTEM_TIME operation, which allows guest OS users to cause a denial of service (buffer overflow and host OS memory corruption) or possibly have unspecified other impact via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1796/">CVE-2013-1796</cve>
	<bugzilla href="https://bugzilla.suse.com/806980">SUSE bug 806980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819789">SUSE bug 819789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1797</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1797" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1797" ref_url="https://www.suse.com/security/cve/CVE-2013-1797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1797/">CVE-2013-1797</cve>
	<bugzilla href="https://bugzilla.suse.com/806980">SUSE bug 806980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819789">SUSE bug 819789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1799</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1799" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1799" ref_url="https://www.suse.com/security/cve/CVE-2013-1799" source="SUSE CVE"/>
    <description>
    Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates when creating accounts for providers who use the libsoup library, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network. NOTE: this issue exists because of an incomplete fix for CVE-2013-0240.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1799/">CVE-2013-1799</cve>
	<bugzilla href="https://bugzilla.suse.com/808534">SUSE bug 808534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482702" comment="gnome-online-accounts-devel-3.26.2-3.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482703" comment="libgoa-1_0-0-3.26.2-3.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482704" comment="libgoa-backend-1_0-1-3.26.2-3.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482705" comment="typelib-1_0-Goa-1_0-3.26.2-3.34 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488906" comment="gnome-online-accounts-3.26.2-3.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488907" comment="gnome-online-accounts-lang-3.26.2-3.34 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1819</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1819" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1819" ref_url="https://www.suse.com/security/cve/CVE-2013-1819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1474-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000607.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000608.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1773-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1819/">CVE-2013-1819</cve>
	<bugzilla href="https://bugzilla.suse.com/807471">SUSE bug 807471</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1826</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1826" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1826" ref_url="https://www.suse.com/security/cve/CVE-2013-1826" source="SUSE CVE"/>
    <description>
    The xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dump_one_state function calls, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1826/">CVE-2013-1826</cve>
	<bugzilla href="https://bugzilla.suse.com/809889">SUSE bug 809889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1827</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1827" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1827" ref_url="https://www.suse.com/security/cve/CVE-2013-1827" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    net/dccp/ccid.h in the Linux kernel before 3.5.4 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability for a certain (1) sender or (2) receiver getsockopt call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1827/">CVE-2013-1827</cve>
	<bugzilla href="https://bugzilla.suse.com/811354">SUSE bug 811354</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1845</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1845" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1845" ref_url="https://www.suse.com/security/cve/CVE-2013-1845" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000468.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0932-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00069.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting or (2) deleting a large number of properties for a file or directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1845/">CVE-2013-1845</cve>
	<bugzilla href="https://bugzilla.suse.com/813913">SUSE bug 813913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1846</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1846" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1846" ref_url="https://www.suse.com/security/cve/CVE-2013-1846" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000468.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0932-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00069.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1846/">CVE-2013-1846</cve>
	<bugzilla href="https://bugzilla.suse.com/813913">SUSE bug 813913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1847</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1847" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1847" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1847" ref_url="https://www.suse.com/security/cve/CVE-2013-1847" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000468.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0932-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00069.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1847/">CVE-2013-1847</cve>
	<bugzilla href="https://bugzilla.suse.com/813913">SUSE bug 813913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1848</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1848" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1848" ref_url="https://www.suse.com/security/cve/CVE-2013-1848" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1848/">CVE-2013-1848</cve>
	<bugzilla href="https://bugzilla.suse.com/809155">SUSE bug 809155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131849" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1849</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1849" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1849" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1849" ref_url="https://www.suse.com/security/cve/CVE-2013-1849" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000468.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0932-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00069.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1849/">CVE-2013-1849</cve>
	<bugzilla href="https://bugzilla.suse.com/813913">SUSE bug 813913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1860</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1860" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1860" ref_url="https://www.suse.com/security/cve/CVE-2013-1860" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted cdc-wdm USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1860/">CVE-2013-1860</cve>
	<bugzilla href="https://bugzilla.suse.com/806431">SUSE bug 806431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1866</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1866" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1866" ref_url="https://www.suse.com/security/cve/CVE-2013-1866" source="SUSE CVE"/>
    <description>
    OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-1866/">CVE-2013-1866</cve>
	<bugzilla href="https://bugzilla.suse.com/1162390">SUSE bug 1162390</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334110" comment="opensc is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131873" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1873</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1873" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1873" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1873" ref_url="https://www.suse.com/security/cve/CVE-2013-1873" source="SUSE CVE"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2634, CVE-2013-2635, CVE-2013-2636. Reason: This candidate is a duplicate of CVE-2013-2634, CVE-2013-2635, and CVE-2013-2636. Notes: All CVE users should reference one or more of CVE-2013-2634, CVE-2013-2635, and CVE-2013-2636 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1873/">CVE-2013-1873</cve>
	<bugzilla href="https://bugzilla.suse.com/810473">SUSE bug 810473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1881</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1881" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1881" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1881" ref_url="https://www.suse.com/security/cve/CVE-2013-1881" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1786-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00114.html" source="SUSE-SU"/>
    <description>
    GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1881/">CVE-2013-1881</cve>
	<bugzilla href="https://bugzilla.suse.com/840753">SUSE bug 840753</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480257" comment="gdk-pixbuf-loader-rsvg-2.42.3-1.49 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480258" comment="librsvg-2-2-2.42.3-1.49 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486497" comment="librsvg-devel-2.42.3-1.49 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486498" comment="typelib-1_0-Rsvg-2_0-2.42.3-1.49 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1884</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1884" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1884" ref_url="https://www.suse.com/security/cve/CVE-2013-1884" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000468.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1869-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00055.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1884/">CVE-2013-1884</cve>
	<bugzilla href="https://bugzilla.suse.com/813913">SUSE bug 813913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1896</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1896" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1896" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1896" ref_url="https://www.suse.com/security/cve/CVE-2013-1896" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000586.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1082-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1337-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1340-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1341-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00065.html" source="SUSE-SU"/>
    <description>
    mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which the URI is configured for handling by the mod_dav_svn module, but a certain href attribute in XML data refers to a non-DAV URI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1896/">CVE-2013-1896</cve>
	<bugzilla href="https://bugzilla.suse.com/829056">SUSE bug 829056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/829057">SUSE bug 829057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131914" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1914</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1914" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1914" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1914" ref_url="https://www.suse.com/security/cve/CVE-2013-1914" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000539.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1914/">CVE-2013-1914</cve>
	<bugzilla href="https://bugzilla.suse.com/813121">SUSE bug 813121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826666">SUSE bug 826666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941444">SUSE bug 941444</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131915" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1915</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1915" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1915" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1915" ref_url="https://www.suse.com/security/cve/CVE-2013-1915" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000429.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1331-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1342-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html" source="SUSE-SU"/>
    <description>
    ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1915/">CVE-2013-1915</cve>
	<bugzilla href="https://bugzilla.suse.com/813190">SUSE bug 813190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488116" comment="apache2-mod_security2-2.9.2-1.34 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1928</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1928" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1928" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1928" ref_url="https://www.suse.com/security/cve/CVE-2013-1928" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow local users to obtain sensitive information from kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl call on a /dev/dvb device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1928/">CVE-2013-1928</cve>
	<bugzilla href="https://bugzilla.suse.com/813735">SUSE bug 813735</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131929" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1929</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1929" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1929" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1929" ref_url="https://www.suse.com/security/cve/CVE-2013-1929" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1474-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000607.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000608.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1773-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1950-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via crafted firmware that specifies a long string in the Vital Product Data (VPD) data structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1929/">CVE-2013-1929</cve>
	<bugzilla href="https://bugzilla.suse.com/813733">SUSE bug 813733</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131943" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1943</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1943" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1943" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1943" ref_url="https://www.suse.com/security/cve/CVE-2013-1943" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows local users to gain privileges or obtain sensitive information from kernel memory via a crafted application, related to arch/x86/kvm/paging_tmpl.h and virt/kvm/kvm_main.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-05"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-1943/">CVE-2013-1943</cve>
	<bugzilla href="https://bugzilla.suse.com/828012">SUSE bug 828012</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1944</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1944" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1944" ref_url="https://www.suse.com/security/cve/CVE-2013-1944" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000450.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0876-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0879-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00016.html" source="SUSE-SU"/>
    <description>
    The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1944/">CVE-2013-1944</cve>
	<bugzilla href="https://bugzilla.suse.com/814655">SUSE bug 814655</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1945</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1945" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1945" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1945" ref_url="https://www.suse.com/security/cve/CVE-2013-1945" source="SUSE CVE"/>
    <description>
    ruby193 uses an insecure LD_LIBRARY_PATH setting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2013-1945/">CVE-2013-1945</cve>
	<bugzilla href="https://bugzilla.suse.com/1160788">SUSE bug 1160788</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1960</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1960" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1960" ref_url="https://www.suse.com/security/cve/CVE-2013-1960" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0812-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0812-2" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0922-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0944-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00080.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1960/">CVE-2013-1960</cve>
	<bugzilla href="https://bugzilla.suse.com/817573">SUSE bug 817573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1961</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1961" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1961" ref_url="https://www.suse.com/security/cve/CVE-2013-1961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0812-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0812-2" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0922-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0944-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00080.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1961/">CVE-2013-1961</cve>
	<bugzilla href="https://bugzilla.suse.com/817573">SUSE bug 817573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/818117">SUSE bug 818117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131968" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1968</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1968" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1968" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1968" ref_url="https://www.suse.com/security/cve/CVE-2013-1968" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000533.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00136.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1139-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00015.html" source="SUSE-SU"/>
    <description>
    Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1968/">CVE-2013-1968</cve>
	<bugzilla href="https://bugzilla.suse.com/821505">SUSE bug 821505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1969</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1969" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1969" ref_url="https://www.suse.com/security/cve/CVE-2013-1969" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0729-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00109.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0945-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00081.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the (1) htmlParseChunk and (2) xmldecl_done functions, as demonstrated by a buffer overflow in the xmlBufGetInputBase function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1969/">CVE-2013-1969</cve>
	<bugzilla href="https://bugzilla.suse.com/815665">SUSE bug 815665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1976</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1976" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1976" ref_url="https://www.suse.com/security/cve/CVE-2013-1976" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000584.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1306-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1411-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00009.html" source="SUSE-SU"/>
    <description>
    The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1976/">CVE-2013-1976</cve>
	<bugzilla href="https://bugzilla.suse.com/822177">SUSE bug 822177</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1979</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1979" ref_url="https://www.suse.com/security/cve/CVE-2013-1979" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1979/">CVE-2013-1979</cve>
	<bugzilla href="https://bugzilla.suse.com/816708">SUSE bug 816708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1981</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1981" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1981" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1981" ref_url="https://www.suse.com/security/cve/CVE-2013-1981" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1100-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000549.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000909.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1047-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00171.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XQueryFont, (2) _XF86BigfontQueryFont, (3) XListFontsWithInfo, (4) XGetMotionEvents, (5) XListHosts, (6) XGetModifierMapping, (7) XGetPointerMapping, (8) XGetKeyboardMapping, (9) XGetWindowProperty, (10) XGetImage, (11) LoadColornameDB, (12) XrmGetFileDatabase, (13) _XimParseStringFile, or (14) TransFileName functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1981/">CVE-2013-1981</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821664">SUSE bug 821664</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481255" comment="libX11-6-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481256" comment="libX11-6-32bit-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481257" comment="libX11-data-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481258" comment="libX11-devel-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481259" comment="libX11-xcb1-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481260" comment="libX11-xcb1-32bit-1.6.5-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1982</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1982" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1982" ref_url="https://www.suse.com/security/cve/CVE-2013-1982" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1099-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000500.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1099-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000550.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000906.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1009-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00139.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XcupGetReservedColormapEntries, (2) XcupStoreColors, (3) XdbeGetVisualInfo, (4) XeviGetVisualInfo, (5) XShapeGetRectangles, and (6) XSyncListSystemCounters functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1982/">CVE-2013-1982</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821665">SUSE bug 821665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480414" comment="libXext-devel-1.3.3-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480415" comment="libXext6-1.3.3-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480416" comment="libXext6-32bit-1.3.3-1.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1983</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1983" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1983" ref_url="https://www.suse.com/security/cve/CVE-2013-1983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1097-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0900-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000916.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1014-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00144.html" source="SUSE-SU"/>
    <description>
    Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1983/">CVE-2013-1983</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821667">SUSE bug 821667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880221">SUSE bug 880221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480417" comment="libXfixes-devel-5.0.3-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480418" comment="libXfixes3-5.0.3-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480419" comment="libXfixes3-32bit-5.0.3-1.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1984</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1984" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1984" ref_url="https://www.suse.com/security/cve/CVE-2013-1984" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1033-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1984/">CVE-2013-1984</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482754" comment="libXi6-32bit-1.7.9-1.23 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480424" comment="libXi-devel-1.7.9-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480425" comment="libXi6-1.7.9-1.23 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1985</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1985" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1985" ref_url="https://www.suse.com/security/cve/CVE-2013-1985" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00154.html" source="SUSE-SU"/>
    <description>
    Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XineramaQueryScreens function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1985/">CVE-2013-1985</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482755" comment="libXinerama1-32bit-1.1.3-1.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480426" comment="libXinerama-devel-1.1.3-1.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480427" comment="libXinerama1-1.1.3-1.22 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1986</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1986" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1986" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1986" ref_url="https://www.suse.com/security/cve/CVE-2013-1986" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1028-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00156.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRRQueryOutputProperty and (2) XRRQueryProviderProperty functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1986/">CVE-2013-1986</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482757" comment="libXrandr2-32bit-1.5.1-2.17 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480430" comment="libXrandr-devel-1.5.1-2.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480431" comment="libXrandr2-1.5.1-2.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1987</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1987" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1987" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1987" ref_url="https://www.suse.com/security/cve/CVE-2013-1987" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1095-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000929.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1011-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00141.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRenderQueryFilters, (2) XRenderQueryFormats, and (3) XRenderQueryPictIndexValues functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1987/">CVE-2013-1987</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821669">SUSE bug 821669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880221">SUSE bug 880221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480432" comment="libXrender-devel-0.9.10-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480433" comment="libXrender1-0.9.10-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480434" comment="libXrender1-32bit-0.9.10-1.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1988</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1988" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1988" ref_url="https://www.suse.com/security/cve/CVE-2013-1988" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1027-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00155.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XResQueryClients and (2) XResQueryClientResources functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1988/">CVE-2013-1988</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480408" comment="libXRes1-1.2.0-1.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480409" comment="libXres-devel-1.2.0-1.18 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1989</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1989" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1989" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1989" ref_url="https://www.suse.com/security/cve/CVE-2013-1989" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1104-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1010-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00140.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXv 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvQueryPortAttributes, (2) XvListImageFormats, and (3) XvCreateImage function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1989/">CVE-2013-1989</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821671">SUSE bug 821671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880221">SUSE bug 880221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480440" comment="libXv-devel-1.0.11-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480441" comment="libXv1-1.0.11-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1990</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1990" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1990" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1990" ref_url="https://www.suse.com/security/cve/CVE-2013-1990" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1025-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00153.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvMCListSurfaceTypes and (2) XvMCListSubpictureTypes functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1990/">CVE-2013-1990</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480442" comment="libXvMC-devel-1.0.10-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480443" comment="libXvMC1-1.0.10-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1991</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1991" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1991" ref_url="https://www.suse.com/security/cve/CVE-2013-1991" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00158.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XDGAQueryModes and (2) XDGASetMode functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1991/">CVE-2013-1991</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480448" comment="libXxf86dga-devel-1.1.4-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480449" comment="libXxf86dga1-1.1.4-1.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1992</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1992" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1992" ref_url="https://www.suse.com/security/cve/CVE-2013-1992" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1029-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00157.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libdmx 1.1.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) DMXGetScreenAttributes, (2) DMXGetWindowAttributes, and (3) DMXGetInputAttributes functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1992/">CVE-2013-1992</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480523" comment="libdmx-devel-1.1.3-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480524" comment="libdmx1-1.1.3-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1995</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1995" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1995" ref_url="https://www.suse.com/security/cve/CVE-2013-1995" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1033-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html" source="SUSE-SU"/>
    <description>
    X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1995/">CVE-2013-1995</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482754" comment="libXi6-32bit-1.7.9-1.23 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480424" comment="libXi-devel-1.7.9-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480425" comment="libXi6-1.7.9-1.23 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1996</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1996" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1996" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1996" ref_url="https://www.suse.com/security/cve/CVE-2013-1996" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00162.html" source="SUSE-SU"/>
    <description>
    X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1996/">CVE-2013-1996</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480355" comment="libFS-devel-1.0.7-1.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480356" comment="libFS6-1.0.7-1.22 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1997</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1997" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1997" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1997" ref_url="https://www.suse.com/security/cve/CVE-2013-1997" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1100-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000549.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000909.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0644-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002689.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1047-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00171.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XAllocColorCells, (2) _XkbReadGetDeviceInfoReply, (3) _XkbReadGeomShapes, (4) _XkbReadGetGeometryReply, (5) _XkbReadKeySyms, (6) _XkbReadKeyActions, (7) _XkbReadKeyBehaviors, (8) _XkbReadModifierMap, (9) _XkbReadExplicitComponents, (10) _XkbReadVirtualModMap, (11) _XkbReadGetNamesReply, (12) _XkbReadGetMapReply, (13) _XimXGetReadData, (14) XListFonts, (15) XListExtensions, and (16) XGetFontPath functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1997/">CVE-2013-1997</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821664">SUSE bug 821664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/824294">SUSE bug 824294</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481255" comment="libX11-6-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481256" comment="libX11-6-32bit-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481257" comment="libX11-data-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481258" comment="libX11-devel-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481259" comment="libX11-xcb1-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481260" comment="libX11-xcb1-32bit-1.6.5-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131998" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1998</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1998" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1998" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1998" ref_url="https://www.suse.com/security/cve/CVE-2013-1998" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1033-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1998/">CVE-2013-1998</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482754" comment="libXi6-32bit-1.7.9-1.23 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480424" comment="libXi-devel-1.7.9-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480425" comment="libXi6-1.7.9-1.23 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1999</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1999" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1999" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1999" ref_url="https://www.suse.com/security/cve/CVE-2013-1999" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1025-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00153.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvMCGetDRInfo function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1999/">CVE-2013-1999</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480442" comment="libXvMC-devel-1.0.10-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480443" comment="libXvMC1-1.0.10-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2000</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2000" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2000" ref_url="https://www.suse.com/security/cve/CVE-2013-2000" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00158.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XDGAQueryModes and (2) XDGASetMode functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2000/">CVE-2013-2000</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480448" comment="libXxf86dga-devel-1.1.4-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480449" comment="libXxf86dga1-1.1.4-1.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2001</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2001" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2001" ref_url="https://www.suse.com/security/cve/CVE-2013-2001" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1041-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00165.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2001/">CVE-2013-2001</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480450" comment="libXxf86vm-devel-1.1.4-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480451" comment="libXxf86vm1-1.1.4-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480452" comment="libXxf86vm1-32bit-1.1.4-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2002</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2002" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2002" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2002" ref_url="https://www.suse.com/security/cve/CVE-2013-2002" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000502.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1101-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000914.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the _XtResourceConfigurationEH function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2002/">CVE-2013-2002</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821670">SUSE bug 821670</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482758" comment="libXt6-32bit-1.1.5-2.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480435" comment="libXt-devel-1.1.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480436" comment="libXt6-1.1.5-2.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2003</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2003" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2003" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2003" ref_url="https://www.suse.com/security/cve/CVE-2013-2003" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1031-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00159.html" source="SUSE-SU"/>
    <description>
    Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the _XcursorFileHeaderCreate function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2003/">CVE-2013-2003</cve>
	<bugzilla href="https://bugzilla.suse.com/1065386">SUSE bug 1065386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482753" comment="libXcursor1-32bit-1.1.15-1.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480410" comment="libXcursor-devel-1.1.15-1.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480411" comment="libXcursor1-1.1.15-1.18 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2004</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2004" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2004" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2004" ref_url="https://www.suse.com/security/cve/CVE-2013-2004" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000501.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1100-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000549.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000909.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1047-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00171.html" source="SUSE-SU"/>
    <description>
    The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2004/">CVE-2013-2004</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821664">SUSE bug 821664</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481255" comment="libX11-6-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481256" comment="libX11-6-32bit-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481257" comment="libX11-data-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481258" comment="libX11-devel-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481259" comment="libX11-xcb1-1.6.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481260" comment="libX11-xcb1-32bit-1.6.5-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2005</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2005" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2005" ref_url="https://www.suse.com/security/cve/CVE-2013-2005" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000502.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1101-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000914.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html" source="SUSE-SU"/>
    <description>
    X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2005/">CVE-2013-2005</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821670">SUSE bug 821670</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482758" comment="libXt6-32bit-1.1.5-2.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480435" comment="libXt-devel-1.1.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480436" comment="libXt6-1.1.5-2.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2015</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2015" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2015" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2015" ref_url="https://www.suse.com/security/cve/CVE-2013-2015" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1950-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-2015/">CVE-2013-2015</cve>
	<bugzilla href="https://bugzilla.suse.com/817377">SUSE bug 817377</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132027" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2027</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2027" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2027" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2027" ref_url="https://www.suse.com/security/cve/CVE-2013-2027" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0269-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00055.html" source="SUSE-SU"/>
    <description>
    Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2027/">CVE-2013-2027</cve>
	<bugzilla href="https://bugzilla.suse.com/916224">SUSE bug 916224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487653" comment="jython-2.2.1-4.36 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2062</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2062" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2062" ref_url="https://www.suse.com/security/cve/CVE-2013-2062" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000503.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1102-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000927.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1046-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00170.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXp 1.0.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XpGetAttributes, (2) XpGetOneAttribute, (3) XpGetPrinterList, and (4) XpQueryScreens functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2062/">CVE-2013-2062</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821668">SUSE bug 821668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880221">SUSE bug 880221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482756" comment="libXp6-32bit-1.0.3-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480428" comment="libXp-devel-1.0.3-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480429" comment="libXp6-1.0.3-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2063</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2063" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2063" ref_url="https://www.suse.com/security/cve/CVE-2013-2063" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000504.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1103-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000557.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1032-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00160.html" source="SUSE-SU"/>
    <description>
    Integer overflow in X.org libXtst 1.2.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XRecordGetContext function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2063/">CVE-2013-2063</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821663">SUSE bug 821663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480437" comment="libXtst-devel-1.2.3-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480438" comment="libXtst6-1.2.3-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480439" comment="libXtst6-32bit-1.2.3-1.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2064</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2064" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2064" ref_url="https://www.suse.com/security/cve/CVE-2013-2064" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000928.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1007-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00137.html" source="SUSE-SU"/>
    <description>
    Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2064/">CVE-2013-2064</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821584">SUSE bug 821584</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481542" comment="libxcb-composite0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481543" comment="libxcb-damage0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481544" comment="libxcb-devel-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481545" comment="libxcb-devel-doc-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481546" comment="libxcb-dpms0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481547" comment="libxcb-dri2-0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481548" comment="libxcb-dri2-0-32bit-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481549" comment="libxcb-dri3-0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481550" comment="libxcb-dri3-0-32bit-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481551" comment="libxcb-glx0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481552" comment="libxcb-glx0-32bit-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481553" comment="libxcb-present0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481554" comment="libxcb-present0-32bit-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481555" comment="libxcb-randr0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481556" comment="libxcb-record0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481557" comment="libxcb-render0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481558" comment="libxcb-res0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481559" comment="libxcb-screensaver0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481560" comment="libxcb-shape0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481561" comment="libxcb-shm0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481562" comment="libxcb-sync1-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481563" comment="libxcb-sync1-32bit-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481564" comment="libxcb-xf86dri0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481565" comment="libxcb-xfixes0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481566" comment="libxcb-xfixes0-32bit-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481567" comment="libxcb-xinerama0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481568" comment="libxcb-xinput0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481569" comment="libxcb-xkb1-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481570" comment="libxcb-xtest0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481571" comment="libxcb-xv0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481572" comment="libxcb-xvmc0-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481573" comment="libxcb1-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481574" comment="libxcb1-32bit-1.13-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486886" comment="libxcb-render0-32bit-1.13-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486887" comment="libxcb-shm0-32bit-1.13-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2066</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2066" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2066" ref_url="https://www.suse.com/security/cve/CVE-2013-2066" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1104-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1010-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00140.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2066/">CVE-2013-2066</cve>
	<bugzilla href="https://bugzilla.suse.com/815451">SUSE bug 815451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821671">SUSE bug 821671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880221">SUSE bug 880221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480440" comment="libXv-devel-1.0.11-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480441" comment="libXv1-1.0.11-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2088</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2088" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2088" ref_url="https://www.suse.com/security/cve/CVE-2013-2088" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00136.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1139-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00015.html" source="SUSE-SU"/>
    <description>
    contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2088/">CVE-2013-2088</cve>
	<bugzilla href="https://bugzilla.suse.com/821505">SUSE bug 821505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2094</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2094" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2094" ref_url="https://www.suse.com/security/cve/CVE-2013-2094" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0819-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0819-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000608.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0951-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00017.html" source="SUSE-SU"/>
    <description>
    The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2094/">CVE-2013-2094</cve>
	<bugzilla href="https://bugzilla.suse.com/819789">SUSE bug 819789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/820202">SUSE bug 820202</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2112</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2112" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2112" ref_url="https://www.suse.com/security/cve/CVE-2013-2112" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1217-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000533.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00136.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1139-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00015.html" source="SUSE-SU"/>
    <description>
    The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of service (exit) by aborting a connection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2112/">CVE-2013-2112</cve>
	<bugzilla href="https://bugzilla.suse.com/821505">SUSE bug 821505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2124</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2124" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2124" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2124" ref_url="https://www.suse.com/security/cve/CVE-2013-2124" source="SUSE CVE"/>
    <description>
    Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7, 1.21.x, 1.22.0, and 1.23.0 allows remote attackers to cause a denial of service (crash) via empty guest files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2124/">CVE-2013-2124</cve>
	<bugzilla href="https://bugzilla.suse.com/828006">SUSE bug 828006</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487691" comment="ocaml-libguestfs-devel-1.38.0-3.52 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488158" comment="guestfs-data-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488159" comment="guestfs-tools-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488160" comment="guestfs-winsupport-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488161" comment="guestfsd-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488162" comment="libguestfs-devel-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488163" comment="libguestfs0-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488164" comment="perl-Sys-Guestfs-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488165" comment="python3-libguestfs-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488166" comment="virt-v2v-1.38.0-3.52 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2126</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2126" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2126" ref_url="https://www.suse.com/security/cve/CVE-2013-2126" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1083-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00193.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1085-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00195.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1168-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00032.html" source="SUSE-SU"/>
    <description>
    Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2126/">CVE-2013-2126</cve>
	<bugzilla href="https://bugzilla.suse.com/822665">SUSE bug 822665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/823113">SUSE bug 823113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/823114">SUSE bug 823114</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489076" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489077" comment="libraw16-0.18.9-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2127</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2127" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2127" ref_url="https://www.suse.com/security/cve/CVE-2013-2127" source="SUSE CVE"/>
    <description>
    Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2127/">CVE-2013-2127</cve>
	<bugzilla href="https://bugzilla.suse.com/822665">SUSE bug 822665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489076" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489077" comment="libraw16-0.18.9-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2128</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2128" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2128" ref_url="https://www.suse.com/security/cve/CVE-2013-2128" source="SUSE CVE"/>
    <description>
    The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption, which allows local users to cause a denial of service (system crash) via a crafted splice system call for a TCP socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2013-2128/">CVE-2013-2128</cve>
	<bugzilla href="https://bugzilla.suse.com/822583">SUSE bug 822583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2131</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2131" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2131" ref_url="https://www.suse.com/security/cve/CVE-2013-2131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002549.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1646-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0474-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00060.html" source="SUSE-SU"/>
    <description>
    Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service (crash) via format string specifiers to the rrdtool.graph function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2131/">CVE-2013-2131</cve>
	<bugzilla href="https://bugzilla.suse.com/828003">SUSE bug 828003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480707" comment="librrd8-1.7.0-4.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480708" comment="rrdtool-1.7.0-4.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480709" comment="rrdtool-devel-1.7.0-4.34 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2139</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2139" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2139" ref_url="https://www.suse.com/security/cve/CVE-2013-2139" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1258-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00059.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-2139/">CVE-2013-2139</cve>
	<bugzilla href="https://bugzilla.suse.com/828009">SUSE bug 828009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486502" comment="libsrtp-devel-1.6.0-2.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486503" comment="libsrtp1-1.6.0-2.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2141</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2141" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2141" ref_url="https://www.suse.com/security/cve/CVE-2013-2141" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a (1) tkill or (2) tgkill system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-2141/">CVE-2013-2141</cve>
	<bugzilla href="https://bugzilla.suse.com/823267">SUSE bug 823267</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2142</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2142" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2142" ref_url="https://www.suse.com/security/cve/CVE-2013-2142" source="SUSE CVE"/>
    <description>
    userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-2142/">CVE-2013-2142</cve>
	<bugzilla href="https://bugzilla.suse.com/823250">SUSE bug 823250</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488915" comment="imobiledevice-tools-1.2.0+git20170122.45fda81-1.44 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482796" comment="libimobiledevice-devel-1.2.0+git20170122.45fda81-1.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482797" comment="libimobiledevice6-1.2.0+git20170122.45fda81-1.44 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2146</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2146" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2146" ref_url="https://www.suse.com/security/cve/CVE-2013-2146" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000716.html" source="SUSE-SU"/>
    <description>
    arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service (general protection fault and system crash) by attempting to set a reserved bit.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2146/">CVE-2013-2146</cve>
	<bugzilla href="https://bugzilla.suse.com/825006">SUSE bug 825006</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2174</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2174" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2174" ref_url="https://www.suse.com/security/cve/CVE-2013-2174" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1166-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000521.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000644.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1132-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1133-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00013.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2174/">CVE-2013-2174</cve>
	<bugzilla href="https://bugzilla.suse.com/824517">SUSE bug 824517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917692">SUSE bug 917692</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2206</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2206" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2206" ref_url="https://www.suse.com/security/cve/CVE-2013-2206" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1744-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1749-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1950-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux kernel before 3.8.5 does not properly handle associations during the processing of a duplicate COOKIE ECHO chunk, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted SCTP traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2206/">CVE-2013-2206</cve>
	<bugzilla href="https://bugzilla.suse.com/781018">SUSE bug 781018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826102">SUSE bug 826102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2207</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2207" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2207" ref_url="https://www.suse.com/security/cve/CVE-2013-2207" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2207/">CVE-2013-2207</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/830257">SUSE bug 830257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979109">SUSE bug 979109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2232</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2232" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2232" ref_url="https://www.suse.com/security/cve/CVE-2013-2232" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1474-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000607.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1773-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The ip6_sk_dst_check function in net/ipv6/ip6_output.c in the Linux kernel before 3.10 allows local users to cause a denial of service (system crash) by using an AF_INET6 socket for a connection to an IPv4 interface.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2232/">CVE-2013-2232</cve>
	<bugzilla href="https://bugzilla.suse.com/827750">SUSE bug 827750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2234</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2234" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2234" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2234" ref_url="https://www.suse.com/security/cve/CVE-2013-2234" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1474-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000607.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1773-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the Linux kernel before 3.10 do not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify interface of an IPSec key_socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-2234/">CVE-2013-2234</cve>
	<bugzilla href="https://bugzilla.suse.com/827749">SUSE bug 827749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2236</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2236" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2236" ref_url="https://www.suse.com/security/cve/CVE-2013-2236" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-September/000597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000902.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2236/">CVE-2013-2236</cve>
	<bugzilla href="https://bugzilla.suse.com/828117">SUSE bug 828117</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488182" comment="libfpm_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488183" comment="libospf0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488184" comment="libospfapiclient0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488185" comment="libquagga_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488186" comment="libzebra1-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488187" comment="quagga-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488188" comment="quagga-devel-1.1.1-2.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2237</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2237" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2237" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2237" ref_url="https://www.suse.com/security/cve/CVE-2013-2237" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1474-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000607.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1773-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel before 3.9 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify_policy interface of an IPSec key_socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2237/">CVE-2013-2237</cve>
	<bugzilla href="https://bugzilla.suse.com/828119">SUSE bug 828119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2249</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2249" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2249" ref_url="https://www.suse.com/security/cve/CVE-2013-2249" source="SUSE CVE"/>
    <description>
    mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new session ID, which has unspecified impact and remote attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2249/">CVE-2013-2249</cve>
	<bugzilla href="https://bugzilla.suse.com/831113">SUSE bug 831113</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2266</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2266" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2266" ref_url="https://www.suse.com/security/cve/CVE-2013-2266" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000425.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0620-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0625-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0666-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00077.html" source="SUSE-SU"/>
    <description>
    libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2266/">CVE-2013-2266</cve>
	<bugzilla href="https://bugzilla.suse.com/811876">SUSE bug 811876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/811934">SUSE bug 811934</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2634</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2634" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2634" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2634" ref_url="https://www.suse.com/security/cve/CVE-2013-2634" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    net/dcb/dcbnl.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-2634/">CVE-2013-2634</cve>
	<bugzilla href="https://bugzilla.suse.com/810473">SUSE bug 810473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2635</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2635" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2635" ref_url="https://www.suse.com/security/cve/CVE-2013-2635" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The rtnl_fill_ifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-2635/">CVE-2013-2635</cve>
	<bugzilla href="https://bugzilla.suse.com/810473">SUSE bug 810473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2636</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2636" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2636" ref_url="https://www.suse.com/security/cve/CVE-2013-2636" source="SUSE CVE"/>
    <description>
    net/bridge/br_mdb.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obtain sensitive information from kernel memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-2636/">CVE-2013-2636</cve>
	<bugzilla href="https://bugzilla.suse.com/810473">SUSE bug 810473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2765</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2765" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2765" ref_url="https://www.suse.com/security/cve/CVE-2013-2765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1406-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-September/000590.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1331-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1342-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2765/">CVE-2013-2765</cve>
	<bugzilla href="https://bugzilla.suse.com/822664">SUSE bug 822664</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488116" comment="apache2-mod_security2-2.9.2-1.34 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2888</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2888" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2888" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2888" ref_url="https://www.suse.com/security/cve/CVE-2013-2888" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000880.html" source="SUSE-SU"/>
    <description>
    Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2888/">CVE-2013-2888</cve>
	<bugzilla href="https://bugzilla.suse.com/835839">SUSE bug 835839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132889" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2889</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2889" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2889" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2889" ref_url="https://www.suse.com/security/cve/CVE-2013-2889" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
    <description>
    drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2889/">CVE-2013-2889</cve>
	<bugzilla href="https://bugzilla.suse.com/835839">SUSE bug 835839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132890" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2890</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2890" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2890" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2890" ref_url="https://www.suse.com/security/cve/CVE-2013-2890" source="SUSE CVE"/>
    <description>
    drivers/hid/hid-sony.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_SONY is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2890/">CVE-2013-2890</cve>
	<bugzilla href="https://bugzilla.suse.com/835839">SUSE bug 835839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132891" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2891</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2891" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2891" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2891" ref_url="https://www.suse.com/security/cve/CVE-2013-2891" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
    <description>
    drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2891/">CVE-2013-2891</cve>
	<bugzilla href="https://bugzilla.suse.com/835839">SUSE bug 835839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132892" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2892</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2892" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2892" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2892" ref_url="https://www.suse.com/security/cve/CVE-2013-2892" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2892/">CVE-2013-2892</cve>
	<bugzilla href="https://bugzilla.suse.com/835839">SUSE bug 835839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132893" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2893</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2893" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2893" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2893" ref_url="https://www.suse.com/security/cve/CVE-2013-2893" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2893/">CVE-2013-2893</cve>
	<bugzilla href="https://bugzilla.suse.com/835839">SUSE bug 835839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132894" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2894</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2894" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2894" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2894" ref_url="https://www.suse.com/security/cve/CVE-2013-2894" source="SUSE CVE"/>
    <description>
    drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2894/">CVE-2013-2894</cve>
	<bugzilla href="https://bugzilla.suse.com/835839">SUSE bug 835839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2895</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2895" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2895" ref_url="https://www.suse.com/security/cve/CVE-2013-2895" source="SUSE CVE"/>
    <description>
    drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive information from kernel memory via a crafted device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2895/">CVE-2013-2895</cve>
	<bugzilla href="https://bugzilla.suse.com/835839">SUSE bug 835839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2896</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2896" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2896" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2896" ref_url="https://www.suse.com/security/cve/CVE-2013-2896" source="SUSE CVE"/>
    <description>
    drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_NTRIG is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2896/">CVE-2013-2896</cve>
	<bugzilla href="https://bugzilla.suse.com/835839">SUSE bug 835839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2897</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2897" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2897" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2897" ref_url="https://www.suse.com/security/cve/CVE-2013-2897" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2897/">CVE-2013-2897</cve>
	<bugzilla href="https://bugzilla.suse.com/835839">SUSE bug 835839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2898</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2898" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2898" ref_url="https://www.suse.com/security/cve/CVE-2013-2898" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
    <description>
    drivers/hid/hid-sensor-hub.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_SENSOR_HUB is enabled, allows physically proximate attackers to obtain sensitive information from kernel memory via a crafted device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2898/">CVE-2013-2898</cve>
	<bugzilla href="https://bugzilla.suse.com/835839">SUSE bug 835839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2899</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2899" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2899" ref_url="https://www.suse.com/security/cve/CVE-2013-2899" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    drivers/hid/hid-picolcd_core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PICOLCD is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2899/">CVE-2013-2899</cve>
	<bugzilla href="https://bugzilla.suse.com/835839">SUSE bug 835839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2944</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-2944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2944" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-2944" ref_url="https://www.suse.com/security/cve/CVE-2013-2944" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1237-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000538.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1237-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000564.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0774-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0775-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0873-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0985-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00121.html" source="SUSE-SU"/>
    <description>
    strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2944/">CVE-2013-2944</cve>
	<bugzilla href="https://bugzilla.suse.com/815236">SUSE bug 815236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3076</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3076" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3076" ref_url="https://www.suse.com/security/cve/CVE-2013-3076" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
    <description>
    The crypto API in the Linux kernel through 3.9-rc8 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call, related to the hash_recvmsg function in crypto/algif_hash.c and the skcipher_recvmsg function in crypto/algif_skcipher.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3076/">CVE-2013-3076</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3222</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3222" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3222" ref_url="https://www.suse.com/security/cve/CVE-2013-3222" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The vcc_recvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3222/">CVE-2013-3222</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3223</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3223" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3223" ref_url="https://www.suse.com/security/cve/CVE-2013-3223" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The ax25_recvmsg function in net/ax25/af_ax25.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3223/">CVE-2013-3223</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3224</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3224" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3224" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3224" ref_url="https://www.suse.com/security/cve/CVE-2013-3224" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The bt_sock_recvmsg function in net/bluetooth/af_bluetooth.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3224/">CVE-2013-3224</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3226</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3226" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3226" ref_url="https://www.suse.com/security/cve/CVE-2013-3226" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The sco_sock_recvmsg function in net/bluetooth/sco.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3226/">CVE-2013-3226</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133227" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3227</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3227" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3227" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3227" ref_url="https://www.suse.com/security/cve/CVE-2013-3227" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The caif_seqpkt_recvmsg function in net/caif/caif_socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3227/">CVE-2013-3227</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3228</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3228" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3228" ref_url="https://www.suse.com/security/cve/CVE-2013-3228" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The irda_recvmsg_dgram function in net/irda/af_irda.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3228/">CVE-2013-3228</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133229" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3229</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3229" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3229" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3229" ref_url="https://www.suse.com/security/cve/CVE-2013-3229" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The iucv_sock_recvmsg function in net/iucv/af_iucv.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3229/">CVE-2013-3229</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133230" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3230</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3230" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3230" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3230" ref_url="https://www.suse.com/security/cve/CVE-2013-3230" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The l2tp_ip6_recvmsg function in net/l2tp/l2tp_ip6.c in the Linux kernel before 3.9-rc7 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-09"/>
	<updated date="2023-07-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3230/">CVE-2013-3230</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3231</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3231" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3231" ref_url="https://www.suse.com/security/cve/CVE-2013-3231" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The llc_ui_recvmsg function in net/llc/af_llc.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3231/">CVE-2013-3231</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3232</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3232" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3232" ref_url="https://www.suse.com/security/cve/CVE-2013-3232" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3232/">CVE-2013-3232</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3233</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3233" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3233" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3233" ref_url="https://www.suse.com/security/cve/CVE-2013-3233" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The llcp_sock_recvmsg function in net/nfc/llcp/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable and a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-05"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3233/">CVE-2013-3233</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3234</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3234" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3234" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3234" ref_url="https://www.suse.com/security/cve/CVE-2013-3234" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The rose_recvmsg function in net/rose/af_rose.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3234/">CVE-2013-3234</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133235" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3235</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3235" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3235" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3235" ref_url="https://www.suse.com/security/cve/CVE-2013-3235" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3235/">CVE-2013-3235</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3236</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3236" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3236" ref_url="https://www.suse.com/security/cve/CVE-2013-3236" source="SUSE CVE"/>
    <description>
    The vmci_transport_dgram_dequeue function in net/vmw_vsock/vmci_transport.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-08"/>
	<updated date="2023-07-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3236/">CVE-2013-3236</cve>
	<bugzilla href="https://bugzilla.suse.com/816668">SUSE bug 816668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3301</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3301" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3301" ref_url="https://www.suse.com/security/cve/CVE-2013-3301" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000608.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for write access to the (1) set_ftrace_pid or (2) set_graph_function file, and then making an lseek system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3301/">CVE-2013-3301</cve>
	<bugzilla href="https://bugzilla.suse.com/815256">SUSE bug 815256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3495</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3495" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3495" ref_url="https://www.suse.com/security/cve/CVE-2013-3495" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1732-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001354.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html" source="SUSE-SU"/>
    <description>
    The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3495/">CVE-2013-3495</cve>
	<bugzilla href="https://bugzilla.suse.com/826717">SUSE bug 826717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903970">SUSE bug 903970</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3571</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-3571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3571" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-3571" ref_url="https://www.suse.com/security/cve/CVE-2013-3571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001850.html" source="SUSE-SU"/>
    <description>
    socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-3571/">CVE-2013-3571</cve>
	<bugzilla href="https://bugzilla.suse.com/821985">SUSE bug 821985</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481656" comment="socat-1.7.3.2-4.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4131</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4131" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4131" ref_url="https://www.suse.com/security/cve/CVE-2013-4131" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1286-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1869-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00055.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4131/">CVE-2013-4131</cve>
	<bugzilla href="https://bugzilla.suse.com/830031">SUSE bug 830031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4162</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4162" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4162" ref_url="https://www.suse.com/security/cve/CVE-2013-4162" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1474-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000607.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1773-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4162/">CVE-2013-4162</cve>
	<bugzilla href="https://bugzilla.suse.com/831058">SUSE bug 831058</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4163</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4163" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4163" ref_url="https://www.suse.com/security/cve/CVE-2013-4163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1474-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000607.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000608.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1773-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00106.html" source="SUSE-SU"/>
    <description>
    The ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6_MTU setsockopt option had been specified, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4163/">CVE-2013-4163</cve>
	<bugzilla href="https://bugzilla.suse.com/831055">SUSE bug 831055</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4231</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4231" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4231" ref_url="https://www.suse.com/security/cve/CVE-2013-4231" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1638-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1482-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00053.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4231/">CVE-2013-4231</cve>
	<bugzilla href="https://bugzilla.suse.com/834477">SUSE bug 834477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4232</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4232" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4232" ref_url="https://www.suse.com/security/cve/CVE-2013-4232" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1638-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1482-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00053.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4232/">CVE-2013-4232</cve>
	<bugzilla href="https://bugzilla.suse.com/834477">SUSE bug 834477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4237</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4237" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4237" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4237" ref_url="https://www.suse.com/security/cve/CVE-2013-4237" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted (1) NTFS or (2) CIFS image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4237/">CVE-2013-4237</cve>
	<bugzilla href="https://bugzilla.suse.com/834594">SUSE bug 834594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883022">SUSE bug 883022</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4238</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4238" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4238" ref_url="https://www.suse.com/security/cve/CVE-2013-4238" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-March/000748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1006-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1437-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1438-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1440-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1462-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1463-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0380-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0498-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2013-4238/">CVE-2013-4238</cve>
	<bugzilla href="https://bugzilla.suse.com/834601">SUSE bug 834601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/839107">SUSE bug 839107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882915">SUSE bug 882915</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912739">SUSE bug 912739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334160" comment="python3 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336374" comment="python3-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336375" comment="python3-dbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337943" comment="python3-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337944" comment="python3-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4243</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4243" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4243" ref_url="https://www.suse.com/security/cve/CVE-2013-4243" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1638-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1482-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00053.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted height and width values in a GIF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4243/">CVE-2013-4243</cve>
	<bugzilla href="https://bugzilla.suse.com/834779">SUSE bug 834779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4244</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4244" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4244" ref_url="https://www.suse.com/security/cve/CVE-2013-4244" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1638-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1482-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00053.html" source="SUSE-SU"/>
    <description>
    The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4244/">CVE-2013-4244</cve>
	<bugzilla href="https://bugzilla.suse.com/834788">SUSE bug 834788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4246</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4246" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4246" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4246" ref_url="https://www.suse.com/security/cve/CVE-2013-4246" source="SUSE CVE"/>
    <description>
    libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4246/">CVE-2013-4246</cve>
	<bugzilla href="https://bugzilla.suse.com/836245">SUSE bug 836245</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4262</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4262" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4262" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4262" ref_url="https://www.suse.com/security/cve/CVE-2013-4262" source="SUSE CVE"/>
    <description>
    svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain privileges via a symlink attack on the pid file.  NOTE: this issue was SPLIT due to different affected versions (ADT3). The irkerbridge.py issue is covered by CVE-2013-7393.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4262/">CVE-2013-4262</cve>
	<bugzilla href="https://bugzilla.suse.com/844201">SUSE bug 844201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4270</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4270" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4270" ref_url="https://www.suse.com/security/cve/CVE-2013-4270" source="SUSE CVE"/>
    <description>
    The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users to bypass intended /proc/sys/net restrictions via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4270/">CVE-2013-4270</cve>
	<bugzilla href="https://bugzilla.suse.com/836949">SUSE bug 836949</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4277</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4277" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4277" ref_url="https://www.suse.com/security/cve/CVE-2013-4277" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000626.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1442-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1485-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00054.html" source="SUSE-SU"/>
    <description>
    Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary processes via a symlink attack on the file specified by the --pid-file option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4277/">CVE-2013-4277</cve>
	<bugzilla href="https://bugzilla.suse.com/836245">SUSE bug 836245</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4282</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4282" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4282" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4282" ref_url="https://www.suse.com/security/cve/CVE-2013-4282" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0884-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0884-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1750-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00032.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2013-4282/">CVE-2013-4282</cve>
	<bugzilla href="https://bugzilla.suse.com/848279">SUSE bug 848279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488364" comment="libspice-server-devel-0.14.1-2.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488365" comment="libspice-server1-0.14.1-2.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4288</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4288" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4288" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4288" ref_url="https://www.suse.com/security/cve/CVE-2013-4288" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1528-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1617-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1620-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00000.html" source="SUSE-SU"/>
    <description>
    Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4288/">CVE-2013-4288</cve>
	<bugzilla href="https://bugzilla.suse.com/1070943">SUSE bug 1070943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099031">SUSE bug 1099031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/835827">SUSE bug 835827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836931">SUSE bug 836931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836932">SUSE bug 836932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836937">SUSE bug 836937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836939">SUSE bug 836939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/844967">SUSE bug 844967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/852368">SUSE bug 852368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854144">SUSE bug 854144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/864716">SUSE bug 864716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333954" comment="libvirt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336190" comment="libvirt-admin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009615940" comment="libvirt-bash-completion is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334932" comment="libvirt-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334933" comment="libvirt-daemon is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334934" comment="libvirt-daemon-config-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334935" comment="libvirt-daemon-config-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334936" comment="libvirt-daemon-driver-interface is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334937" comment="libvirt-daemon-driver-libxl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334938" comment="libvirt-daemon-driver-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334939" comment="libvirt-daemon-driver-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334940" comment="libvirt-daemon-driver-nodedev is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334941" comment="libvirt-daemon-driver-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334942" comment="libvirt-daemon-driver-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334943" comment="libvirt-daemon-driver-secret is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334944" comment="libvirt-daemon-driver-storage is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336191" comment="libvirt-daemon-driver-storage-core is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336192" comment="libvirt-daemon-driver-storage-disk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336193" comment="libvirt-daemon-driver-storage-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336194" comment="libvirt-daemon-driver-storage-logical is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336195" comment="libvirt-daemon-driver-storage-mpath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336196" comment="libvirt-daemon-driver-storage-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336197" comment="libvirt-daemon-driver-storage-scsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335515" comment="libvirt-daemon-hooks is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334945" comment="libvirt-daemon-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334946" comment="libvirt-daemon-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334947" comment="libvirt-daemon-xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334950" comment="libvirt-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334948" comment="libvirt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336198" comment="libvirt-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334949" comment="libvirt-lock-sanlock is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335514" comment="libvirt-nss is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659643" comment="polkit-default-privs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659644" comment="rpmlint is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481468" comment="libpolkit0-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481501" comment="libsystemd0-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481502" comment="libsystemd0-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481503" comment="libudev-devel-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481504" comment="libudev1-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481505" comment="libudev1-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481469" comment="polkit-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481470" comment="polkit-devel-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481506" comment="systemd-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481507" comment="systemd-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481508" comment="systemd-bash-completion-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481509" comment="systemd-container-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481510" comment="systemd-coredump-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481511" comment="systemd-devel-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481512" comment="systemd-sysvinit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481471" comment="typelib-1_0-Polkit-1_0-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481513" comment="udev-234-24.25.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4289</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4289" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4289" ref_url="https://www.suse.com/security/cve/CVE-2013-4289" source="SUSE CVE"/>
    <description>
    Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-4289/">CVE-2013-4289</cve>
	<bugzilla href="https://bugzilla.suse.com/839879">SUSE bug 839879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4290</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4290" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4290" ref_url="https://www.suse.com/security/cve/CVE-2013-4290" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib/openjp3d/event.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-4290/">CVE-2013-4290</cve>
	<bugzilla href="https://bugzilla.suse.com/839879">SUSE bug 839879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4311</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4311" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4311" ref_url="https://www.suse.com/security/cve/CVE-2013-4311" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1549-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1550-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00024.html" source="SUSE-SU"/>
    <description>
    libvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition in pkcheck via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4311/">CVE-2013-4311</cve>
	<bugzilla href="https://bugzilla.suse.com/836931">SUSE bug 836931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/838638">SUSE bug 838638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/864716">SUSE bug 864716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333954" comment="libvirt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336190" comment="libvirt-admin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009615940" comment="libvirt-bash-completion is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334932" comment="libvirt-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334933" comment="libvirt-daemon is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334934" comment="libvirt-daemon-config-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334935" comment="libvirt-daemon-config-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334936" comment="libvirt-daemon-driver-interface is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334937" comment="libvirt-daemon-driver-libxl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334938" comment="libvirt-daemon-driver-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334939" comment="libvirt-daemon-driver-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334940" comment="libvirt-daemon-driver-nodedev is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334941" comment="libvirt-daemon-driver-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334942" comment="libvirt-daemon-driver-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334943" comment="libvirt-daemon-driver-secret is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334944" comment="libvirt-daemon-driver-storage is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336191" comment="libvirt-daemon-driver-storage-core is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336192" comment="libvirt-daemon-driver-storage-disk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336193" comment="libvirt-daemon-driver-storage-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336194" comment="libvirt-daemon-driver-storage-logical is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336195" comment="libvirt-daemon-driver-storage-mpath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336196" comment="libvirt-daemon-driver-storage-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336197" comment="libvirt-daemon-driver-storage-scsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335515" comment="libvirt-daemon-hooks is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334945" comment="libvirt-daemon-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334946" comment="libvirt-daemon-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334947" comment="libvirt-daemon-xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334950" comment="libvirt-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334948" comment="libvirt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336198" comment="libvirt-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334949" comment="libvirt-lock-sanlock is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335514" comment="libvirt-nss is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659643" comment="polkit-default-privs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659644" comment="rpmlint is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4314</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4314" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4314" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4314" ref_url="https://www.suse.com/security/cve/CVE-2013-4314" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000669.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1648-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0477-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4314/">CVE-2013-4314</cve>
	<bugzilla href="https://bugzilla.suse.com/839107">SUSE bug 839107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481639" comment="python3-pyOpenSSL-17.5.0-3.3.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134326" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4326</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4326" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4326" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4326" ref_url="https://www.suse.com/security/cve/CVE-2013-4326" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1597-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00051.html" source="SUSE-SU"/>
    <description>
    RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4326/">CVE-2013-4326</cve>
	<bugzilla href="https://bugzilla.suse.com/836931">SUSE bug 836931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836932">SUSE bug 836932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836937">SUSE bug 836937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836939">SUSE bug 836939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/864716">SUSE bug 864716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486543" comment="rtkit-0.11+git.20130926-1.34 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4332</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4332" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4332" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4332" ref_url="https://www.suse.com/security/cve/CVE-2013-4332" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corruption) via a large value to the (1) pvalloc, (2) valloc, (3) posix_memalign, (4) memalign, or (5) aligned_alloc functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4332/">CVE-2013-4332</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/839870">SUSE bug 839870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4350</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4350" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4350" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4350" ref_url="https://www.suse.com/security/cve/CVE-2013-4350" source="SUSE CVE"/>
    <description>
    The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4350/">CVE-2013-4350</cve>
	<bugzilla href="https://bugzilla.suse.com/840506">SUSE bug 840506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4351</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4351" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4351" ref_url="https://www.suse.com/security/cve/CVE-2013-4351" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1578-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000612.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1494-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1526-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1532-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00006.html" source="SUSE-SU"/>
    <description>
    GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4351/">CVE-2013-4351</cve>
	<bugzilla href="https://bugzilla.suse.com/840510">SUSE bug 840510</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481170" comment="gpg2-2.2.5-4.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481171" comment="gpg2-lang-2.2.5-4.6.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4353</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4353" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4353" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4353" ref_url="https://www.suse.com/security/cve/CVE-2013-4353" source="SUSE CVE"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021448" ref_url="https://www.suse.com/support/kb/doc/?id=7021448" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021738" ref_url="https://www.suse.com/support/kb/doc/?id=7021738" source="SUSE-SU"/>
		<reference ref_id="TID7021992" ref_url="https://www.suse.com/support/kb/doc/?id=7021992" source="SUSE-SU"/>
		<reference ref_id="TID7022038" ref_url="https://www.suse.com/support/kb/doc/?id=7022038" source="SUSE-SU"/>
		<reference ref_id="TID7022768" ref_url="https://www.suse.com/support/kb/doc/?id=7022768" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0094-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0096-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00070.html" source="SUSE-SU"/>
    <description>
    The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4353/">CVE-2013-4353</cve>
	<bugzilla href="https://bugzilla.suse.com/857640">SUSE bug 857640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4387</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4387" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4387" ref_url="https://www.suse.com/security/cve/CVE-2013-4387" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4387/">CVE-2013-4387</cve>
	<bugzilla href="https://bugzilla.suse.com/843430">SUSE bug 843430</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/848042">SUSE bug 848042</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4402</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4402" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4402" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4402" ref_url="https://www.suse.com/security/cve/CVE-2013-4402" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000611.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1546-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1552-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00025.html" source="SUSE-SU"/>
    <description>
    The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4402/">CVE-2013-4402</cve>
	<bugzilla href="https://bugzilla.suse.com/844175">SUSE bug 844175</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941439">SUSE bug 941439</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481170" comment="gpg2-2.2.5-4.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481171" comment="gpg2-lang-2.2.5-4.6.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4419</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4419" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4419" ref_url="https://www.suse.com/security/cve/CVE-2013-4419" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4419/">CVE-2013-4419</cve>
	<bugzilla href="https://bugzilla.suse.com/845720">SUSE bug 845720</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487691" comment="ocaml-libguestfs-devel-1.38.0-3.52 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488158" comment="guestfs-data-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488159" comment="guestfs-tools-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488160" comment="guestfs-winsupport-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488161" comment="guestfsd-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488162" comment="libguestfs-devel-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488163" comment="libguestfs0-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488164" comment="perl-Sys-Guestfs-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488165" comment="python3-libguestfs-1.38.0-3.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488166" comment="virt-v2v-1.38.0-3.52 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4444</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4444" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4444" ref_url="https://www.suse.com/security/cve/CVE-2013-4444" source="SUSE CVE"/>
    <description>
    Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2013-4444/">CVE-2013-4444</cve>
	<bugzilla href="https://bugzilla.suse.com/896047">SUSE bug 896047</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336148" comment="tomcat-admin-webapps is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336150" comment="tomcat-el-3_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336152" comment="tomcat-jsp-2_3-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336153" comment="tomcat-lib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338847" comment="tomcat-servlet-4_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336155" comment="tomcat-webapps is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4458</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4458" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4458" ref_url="https://www.suse.com/security/cve/CVE-2013-4458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4458/">CVE-2013-4458</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/847227">SUSE bug 847227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883217">SUSE bug 883217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941444">SUSE bug 941444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955181">SUSE bug 955181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967023">SUSE bug 967023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980483">SUSE bug 980483</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4473</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4473" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4473" ref_url="https://www.suse.com/security/cve/CVE-2013-4473" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4473/">CVE-2013-4473</cve>
	<bugzilla href="https://bugzilla.suse.com/847907">SUSE bug 847907</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4474</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4474" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4474" ref_url="https://www.suse.com/security/cve/CVE-2013-4474" source="SUSE CVE"/>
    <description>
    Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4474/">CVE-2013-4474</cve>
	<bugzilla href="https://bugzilla.suse.com/847907">SUSE bug 847907</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4483</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4483" ref_url="https://www.suse.com/security/cve/CVE-2013-4483" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0169-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000880.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html" source="SUSE-SU"/>
    <description>
    The ipc_rcu_putref function in ipc/util.c in the Linux kernel before 3.10 does not properly manage a reference count, which allows local users to cause a denial of service (memory consumption or system crash) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4483/">CVE-2013-4483</cve>
	<bugzilla href="https://bugzilla.suse.com/848321">SUSE bug 848321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4505</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4505" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4505" ref_url="https://www.suse.com/security/cve/CVE-2013-4505" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1836-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1869-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00055.html" source="SUSE-SU"/>
    <description>
    The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service (resource consumption) via a relative URL in a REPORT request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4505/">CVE-2013-4505</cve>
	<bugzilla href="https://bugzilla.suse.com/850667">SUSE bug 850667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/850747">SUSE bug 850747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/862459">SUSE bug 862459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4509</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4509" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4509" ref_url="https://www.suse.com/security/cve/CVE-2013-4509" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1686-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1825-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0068-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00045.html" source="SUSE-SU"/>
    <description>
    The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4509/">CVE-2013-4509</cve>
	<bugzilla href="https://bugzilla.suse.com/847718">SUSE bug 847718</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486643" comment="ibus-chewing-1.4.14-4.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486644" comment="ibus-pinyin-1.5.0-4.37 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4515</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4515" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4515" ref_url="https://www.suse.com/security/cve/CVE-2013-4515" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0169-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000716.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html" source="SUSE-SU"/>
    <description>
    The bcm_char_ioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an IOCTL_BCM_GET_DEVICE_DRIVER_INFO ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4515/">CVE-2013-4515</cve>
	<bugzilla href="https://bugzilla.suse.com/849034">SUSE bug 849034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4516</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4516" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4516" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4516" ref_url="https://www.suse.com/security/cve/CVE-2013-4516" source="SUSE CVE"/>
    <description>
    The mp_get_count function in drivers/staging/sb105x/sb_pci_mp.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4516/">CVE-2013-4516</cve>
	<bugzilla href="https://bugzilla.suse.com/849036">SUSE bug 849036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4533</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4533" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4533" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4533" ref_url="https://www.suse.com/security/cve/CVE-2013-4533" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-&gt;rx_level value in a savevm image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4533/">CVE-2013-4533</cve>
	<bugzilla href="https://bugzilla.suse.com/1072223">SUSE bug 1072223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/864655">SUSE bug 864655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871442">SUSE bug 871442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964644">SUSE bug 964644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4534</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4534" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4534" ref_url="https://www.suse.com/security/cve/CVE-2013-4534" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4534/">CVE-2013-4534</cve>
	<bugzilla href="https://bugzilla.suse.com/864811">SUSE bug 864811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871442">SUSE bug 871442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964452">SUSE bug 964452</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4537</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4537" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4537" ref_url="https://www.suse.com/security/cve/CVE-2013-4537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4537/">CVE-2013-4537</cve>
	<bugzilla href="https://bugzilla.suse.com/864391">SUSE bug 864391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871442">SUSE bug 871442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962642">SUSE bug 962642</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4538</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4538" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4538" ref_url="https://www.suse.com/security/cve/CVE-2013-4538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4538/">CVE-2013-4538</cve>
	<bugzilla href="https://bugzilla.suse.com/1072223">SUSE bug 1072223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/864769">SUSE bug 864769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871442">SUSE bug 871442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962335">SUSE bug 962335</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4539</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4539" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4539" ref_url="https://www.suse.com/security/cve/CVE-2013-4539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4539/">CVE-2013-4539</cve>
	<bugzilla href="https://bugzilla.suse.com/1072223">SUSE bug 1072223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/864805">SUSE bug 864805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871442">SUSE bug 871442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962758">SUSE bug 962758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4540</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4540" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4540" ref_url="https://www.suse.com/security/cve/CVE-2013-4540" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-October/001039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4540/">CVE-2013-4540</cve>
	<bugzilla href="https://bugzilla.suse.com/864801">SUSE bug 864801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871442">SUSE bug 871442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880751">SUSE bug 880751</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4545</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4545" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4545" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4545" ref_url="https://www.suse.com/security/cve/CVE-2013-4545" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000678.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1859-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1865-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00053.html" source="SUSE-SU"/>
    <description>
    cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4545/">CVE-2013-4545</cve>
	<bugzilla href="https://bugzilla.suse.com/849596">SUSE bug 849596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/870444">SUSE bug 870444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880252">SUSE bug 880252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882520">SUSE bug 882520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924250">SUSE bug 924250</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4558</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4558" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4558" ref_url="https://www.suse.com/security/cve/CVE-2013-4558" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1836-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1869-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00055.html" source="SUSE-SU"/>
    <description>
    The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4, when built with assertions enabled and SVNAutoversioning is enabled, allows remote attackers to cause a denial of service (assertion failure and Apache process abort) via a non-canonical URL in a request, as demonstrated using a trailing /.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4558/">CVE-2013-4558</cve>
	<bugzilla href="https://bugzilla.suse.com/850667">SUSE bug 850667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/850747">SUSE bug 850747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/862459">SUSE bug 862459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4566</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4566" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4566" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4566" ref_url="https://www.suse.com/security/cve/CVE-2013-4566" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1926-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002277.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2396-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002292.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1956-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00118.html" source="SUSE-SU"/>
    <description>
    mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4566/">CVE-2013-4566</cve>
	<bugzilla href="https://bugzilla.suse.com/853039">SUSE bug 853039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488115" comment="apache2-mod_nss-1.0.17-1.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134579" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4579</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4579" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4579" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4579" ref_url="https://www.suse.com/security/cve/CVE-2013-4579" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000882.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC addresses on which a Wi-Fi device is listening, which allows remote attackers to discover the original MAC address after spoofing by sending a series of packets to MAC addresses with certain bit manipulations.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4579/">CVE-2013-4579</cve>
	<bugzilla href="https://bugzilla.suse.com/851426">SUSE bug 851426</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4587</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4587" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4587" ref_url="https://www.suse.com/security/cve/CVE-2013-4587" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0169-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html" source="SUSE-SU"/>
    <description>
    Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges via a large id value.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4587/">CVE-2013-4587</cve>
	<bugzilla href="https://bugzilla.suse.com/853050">SUSE bug 853050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882914">SUSE bug 882914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4591</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4591" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4591" ref_url="https://www.suse.com/security/cve/CVE-2013-4591" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via a getxattr system call for the system.nfs4_acl extended attribute of a pathname on an NFSv4 filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4591/">CVE-2013-4591</cve>
	<bugzilla href="https://bugzilla.suse.com/851103">SUSE bug 851103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4592</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4592" ref_url="https://www.suse.com/security/cve/CVE-2013-4592" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0169-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000716.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html" source="SUSE-SU"/>
    <description>
    Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel before 3.9 allows local users to cause a denial of service (memory consumption) by leveraging certain device access to trigger movement of memory slots.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4592/">CVE-2013-4592</cve>
	<bugzilla href="https://bugzilla.suse.com/851101">SUSE bug 851101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4758</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4758" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4758" ref_url="https://www.suse.com/security/cve/CVE-2013-4758" source="SUSE CVE"/>
    <description>
    Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JSON response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4758/">CVE-2013-4758</cve>
	<bugzilla href="https://bugzilla.suse.com/828140">SUSE bug 828140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481653" comment="rsyslog-8.33.1-3.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488431" comment="rsyslog-module-gssapi-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488432" comment="rsyslog-module-gtls-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488433" comment="rsyslog-module-mysql-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488434" comment="rsyslog-module-pgsql-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488435" comment="rsyslog-module-relp-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488436" comment="rsyslog-module-snmp-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488437" comment="rsyslog-module-udpspoof-8.33.1-3.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134854" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4854</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-4854" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4854" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-4854" ref_url="https://www.suse.com/security/cve/CVE-2013-4854" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1353-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00018.html" source="SUSE-SU"/>
    <description>
    The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4854/">CVE-2013-4854</cve>
	<bugzilla href="https://bugzilla.suse.com/831899">SUSE bug 831899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5018</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5018" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5018" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5018" ref_url="https://www.suse.com/security/cve/CVE-2013-5018" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1866-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000662.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1866-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1866-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000675.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1332-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1333-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00050.html" source="SUSE-SU"/>
    <description>
    The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of service (segmentation fault) via a (1) XAuth username, (2) EAP identity, or (3) PEM encoded file that starts with a 0x04, 0x30, or 0x31 character followed by an ASN.1 length value that triggers an integer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-5018/">CVE-2013-5018</cve>
	<bugzilla href="https://bugzilla.suse.com/833278">SUSE bug 833278</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5123</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5123" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5123" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5123" ref_url="https://www.suse.com/security/cve/CVE-2013-5123" source="SUSE CVE"/>
    <description>
    The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2013-5123/">CVE-2013-5123</cve>
	<bugzilla href="https://bugzilla.suse.com/864406">SUSE bug 864406</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480895" comment="python3-pip-10.0.1-1.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009656226" comment="python2-pip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659647" comment="python3-pip is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5211</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5211" ref_url="https://www.suse.com/security/cve/CVE-2013-5211" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2014:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000934.html" source="SUSE-SU"/>
		<reference ref_id="TID7014543" ref_url="https://www.suse.com/support/kb/doc?id=7014543" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0949-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1149-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00031.html" source="SUSE-SU"/>
    <description>
    The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-5211/">CVE-2013-5211</cve>
	<bugzilla href="https://bugzilla.suse.com/857195">SUSE bug 857195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/889447">SUSE bug 889447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5590</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5590" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5590" ref_url="https://www.suse.com/security/cve/CVE-2013-5590" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5590/">CVE-2013-5590</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5591</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5591" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5591" ref_url="https://www.suse.com/security/cve/CVE-2013-5591" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5591/">CVE-2013-5591</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5592</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5592" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5592" ref_url="https://www.suse.com/security/cve/CVE-2013-5592" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5592/">CVE-2013-5592</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5593</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5593" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5593" ref_url="https://www.suse.com/security/cve/CVE-2013-5593" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement of HTML within a dropdown menu, which allows remote attackers to spoof the address bar or conduct clickjacking attacks via vectors that trigger navigation off of a page containing this element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5593/">CVE-2013-5593</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5595</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5595" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5595" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5595" ref_url="https://www.suse.com/security/cve/CVE-2013-5595" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly allocate memory for unspecified functions, which allows remote attackers to conduct buffer overflow attacks via a crafted web page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5595/">CVE-2013-5595</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5596</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5596" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5596" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5596" ref_url="https://www.suse.com/security/cve/CVE-2013-5596" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for release of an image object, which allows remote attackers to execute arbitrary code or cause a denial of service (race condition and application crash) via a large HTML document containing IMG elements, as demonstrated by the Never-Ending Reddit on reddit.com.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5596/">CVE-2013-5596</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5597</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5597" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5597" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5597" ref_url="https://www.suse.com/security/cve/CVE-2013-5597" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a state-change event during an update of the offline cache.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5597/">CVE-2013-5597</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5598</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5598" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5598" ref_url="https://www.suse.com/security/cve/CVE-2013-5598" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
    <description>
    PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which allows remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges by using this element within an embedded PDF object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5598/">CVE-2013-5598</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5599</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5599" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5599" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5599" ref_url="https://www.suse.com/security/cve/CVE-2013-5599" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a CANVAS element, a mozTextStyle attribute, and an onresize event.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5599/">CVE-2013-5599</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5600</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5600" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5600" ref_url="https://www.suse.com/security/cve/CVE-2013-5600" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors involving a blob: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5600/">CVE-2013-5600</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5601</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5601" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5601" ref_url="https://www.suse.com/security/cve/CVE-2013-5601" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors related to a memory allocation through the garbage collection (GC) API.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5601/">CVE-2013-5601</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5602</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5602" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5602" ref_url="https://www.suse.com/security/cve/CVE-2013-5602" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to direct proxies.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5602/">CVE-2013-5602</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135603" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5603</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5603" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5603" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5603" ref_url="https://www.suse.com/security/cve/CVE-2013-5603" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving HTML document templates.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5603/">CVE-2013-5603</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135604" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5604</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5604" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5604" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5604" ref_url="https://www.suse.com/security/cve/CVE-2013-5604" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1634-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1788-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5604/">CVE-2013-5604</cve>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5605</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5605" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5605" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5605" ref_url="https://www.suse.com/security/cve/CVE-2013-5605" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1730-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1732-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-5605/">CVE-2013-5605</cve>
	<bugzilla href="https://bugzilla.suse.com/850148">SUSE bug 850148</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135606" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5606</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5606" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5606" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5606" ref_url="https://www.suse.com/security/cve/CVE-2013-5606" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1732-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html" source="SUSE-SU"/>
    <description>
    The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access restrictions via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-5606/">CVE-2013-5606</cve>
	<bugzilla href="https://bugzilla.suse.com/850148">SUSE bug 850148</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5607</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5607" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5607" ref_url="https://www.suse.com/security/cve/CVE-2013-5607" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1732-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-5607/">CVE-2013-5607</cve>
	<bugzilla href="https://bugzilla.suse.com/850148">SUSE bug 850148</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135609" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5609</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5609" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5609" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5609" ref_url="https://www.suse.com/security/cve/CVE-2013-5609" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1959-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-5609/">CVE-2013-5609</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5610</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5610" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5610" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5610" ref_url="https://www.suse.com/security/cve/CVE-2013-5610" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1959-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-5610/">CVE-2013-5610</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5611</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5611" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5611" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5611" ref_url="https://www.suse.com/security/cve/CVE-2013-5611" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-5611/">CVE-2013-5611</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135612" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5612</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5612" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5612" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5612" ref_url="https://www.suse.com/security/cve/CVE-2013-5612" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-5612/">CVE-2013-5612</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5613</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5613" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5613" ref_url="https://www.suse.com/security/cve/CVE-2013-5613" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1959-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving synthetic mouse movement, related to the RestyleManager::GetHoverGeneration function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-5613/">CVE-2013-5613</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135614" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5614</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5614" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5614" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5614" ref_url="https://www.suse.com/security/cve/CVE-2013-5614" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-5614/">CVE-2013-5614</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5615</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5615" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5615" ref_url="https://www.suse.com/security/cve/CVE-2013-5615" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1959-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-5615/">CVE-2013-5615</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5616</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5616" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5616" ref_url="https://www.suse.com/security/cve/CVE-2013-5616" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1959-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to mListeners event listeners.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-5616/">CVE-2013-5616</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5618</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5618" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5618" ref_url="https://www.suse.com/security/cve/CVE-2013-5618" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1959-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-5618/">CVE-2013-5618</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5619</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5619" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5619" ref_url="https://www.suse.com/security/cve/CVE-2013-5619" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-03"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5619/">CVE-2013-5619</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135653" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5653</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5653" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5653" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5653" ref_url="https://www.suse.com/security/cve/CVE-2013-5653" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2492-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002404.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2648-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00084.html" source="SUSE-SU"/>
    <description>
    The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-5653/">CVE-2013-5653</cve>
	<bugzilla href="https://bugzilla.suse.com/1001951">SUSE bug 1001951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004237">SUSE bug 1004237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007816">SUSE bug 1007816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036453">SUSE bug 1036453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5704</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-5704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5704" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-5704" ref_url="https://www.suse.com/security/cve/CVE-2013-5704" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001415.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00108.html" source="SUSE-SU"/>
    <description>
    The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding.  NOTE: the vendor states "this is not a security issue in httpd as such."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-5704/">CVE-2013-5704</cve>
	<bugzilla href="https://bugzilla.suse.com/871310">SUSE bug 871310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914535">SUSE bug 914535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930944">SUSE bug 930944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938728">SUSE bug 938728</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6045</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6045" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6045" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6045" ref_url="https://www.suse.com/security/cve/CVE-2013-6045" source="SUSE CVE"/>
    <description>
    Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6045/">CVE-2013-6045</cve>
	<bugzilla href="https://bugzilla.suse.com/1012822">SUSE bug 1012822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/853644">SUSE bug 853644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/853838">SUSE bug 853838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6052</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6052" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6052" ref_url="https://www.suse.com/security/cve/CVE-2013-6052" source="SUSE CVE"/>
    <description>
    OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6052/">CVE-2013-6052</cve>
	<bugzilla href="https://bugzilla.suse.com/853644">SUSE bug 853644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6053</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6053" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6053" ref_url="https://www.suse.com/security/cve/CVE-2013-6053" source="SUSE CVE"/>
    <description>
    OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6053/">CVE-2013-6053</cve>
	<bugzilla href="https://bugzilla.suse.com/853644">SUSE bug 853644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6054</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6054" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6054" ref_url="https://www.suse.com/security/cve/CVE-2013-6054" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6054/">CVE-2013-6054</cve>
	<bugzilla href="https://bugzilla.suse.com/853644">SUSE bug 853644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6075</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6075" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6075" ref_url="https://www.suse.com/security/cve/CVE-2013-6075" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1646-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1651-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00018.html" source="SUSE-SU"/>
    <description>
    The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an "insufficient length check" during identity comparison.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6075/">CVE-2013-6075</cve>
	<bugzilla href="https://bugzilla.suse.com/847506">SUSE bug 847506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6076</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6076" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6076" ref_url="https://www.suse.com/security/cve/CVE-2013-6076" source="SUSE CVE"/>
    <description>
    strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6076/">CVE-2013-6076</cve>
	<bugzilla href="https://bugzilla.suse.com/847509">SUSE bug 847509</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6369</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6369" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6369" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6369" ref_url="https://www.suse.com/security/cve/CVE-2013-6369" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0978-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00009.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6369/">CVE-2013-6369</cve>
	<bugzilla href="https://bugzilla.suse.com/870855">SUSE bug 870855</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482799" comment="libjbig2-32bit-2.1-1.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480586" comment="libjbig-devel-2.1-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480587" comment="libjbig2-2.1-1.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6370</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6370" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6370" ref_url="https://www.suse.com/security/cve/CVE-2013-6370" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0558-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00059.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6370/">CVE-2013-6370</cve>
	<bugzilla href="https://bugzilla.suse.com/870147">SUSE bug 870147</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480593" comment="libjson-c-devel-0.13-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480594" comment="libjson-c3-0.13-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480595" comment="libjson-c3-32bit-0.13-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481653" comment="rsyslog-8.33.1-3.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488431" comment="rsyslog-module-gssapi-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488432" comment="rsyslog-module-gtls-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488433" comment="rsyslog-module-mysql-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488434" comment="rsyslog-module-pgsql-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488435" comment="rsyslog-module-relp-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488436" comment="rsyslog-module-snmp-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488437" comment="rsyslog-module-udpspoof-8.33.1-3.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6371</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6371" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6371" ref_url="https://www.suse.com/security/cve/CVE-2013-6371" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0558-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00059.html" source="SUSE-SU"/>
    <description>
    The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6371/">CVE-2013-6371</cve>
	<bugzilla href="https://bugzilla.suse.com/870147">SUSE bug 870147</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480593" comment="libjson-c-devel-0.13-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480594" comment="libjson-c3-0.13-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480595" comment="libjson-c3-32bit-0.13-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481653" comment="rsyslog-8.33.1-3.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488431" comment="rsyslog-module-gssapi-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488432" comment="rsyslog-module-gtls-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488433" comment="rsyslog-module-mysql-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488434" comment="rsyslog-module-pgsql-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488435" comment="rsyslog-module-relp-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488436" comment="rsyslog-module-snmp-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488437" comment="rsyslog-module-udpspoof-8.33.1-3.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6376</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6376" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6376" ref_url="https://www.suse.com/security/cve/CVE-2013-6376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000716.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html" source="SUSE-SU"/>
    <description>
    The recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (host OS crash) via a crafted ICR write operation in x2apic mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6376/">CVE-2013-6376</cve>
	<bugzilla href="https://bugzilla.suse.com/853053">SUSE bug 853053</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6378</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6378" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6378" ref_url="https://www.suse.com/security/cve/CVE-2013-6378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0169-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html" source="SUSE-SU"/>
    <description>
    The lbs_debugfs_write function in drivers/net/wireless/libertas/debugfs.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service (OOPS) by leveraging root privileges for a zero-length write operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6378/">CVE-2013-6378</cve>
	<bugzilla href="https://bugzilla.suse.com/852559">SUSE bug 852559</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6381</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6381" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6381" ref_url="https://www.suse.com/security/cve/CVE-2013-6381" source="SUSE CVE"/>
    <description>
    Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6381/">CVE-2013-6381</cve>
	<bugzilla href="https://bugzilla.suse.com/852552">SUSE bug 852552</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6393</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6393" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6393" ref_url="https://www.suse.com/security/cve/CVE-2013-6393" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-March/000756.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-March/000769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0953-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001412.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0272-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0381-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0319-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6393/">CVE-2013-6393</cve>
	<bugzilla href="https://bugzilla.suse.com/860617">SUSE bug 860617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911782">SUSE bug 911782</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487702" comment="perl-YAML-LibYAML-0.59-1.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480828" comment="libyaml-0-2-0.1.7-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480829" comment="libyaml-devel-0.1.7-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6401</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6401" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6401" ref_url="https://www.suse.com/security/cve/CVE-2013-6401" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0467-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-March/000775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0394-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00057.html" source="SUSE-SU"/>
    <description>
    Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted JSON document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6401/">CVE-2013-6401</cve>
	<bugzilla href="https://bugzilla.suse.com/863301">SUSE bug 863301</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480579" comment="libjansson-devel-2.9-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480580" comment="libjansson4-2.9-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481404" comment="libjansson4-32bit-2.9-1.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6418</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6418" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6418" ref_url="https://www.suse.com/security/cve/CVE-2013-6418" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-April/000804.html" source="SUSE-SU"/>
    <description>
    PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6418/">CVE-2013-6418</cve>
	<bugzilla href="https://bugzilla.suse.com/856323">SUSE bug 856323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488262" comment="python3-pywbem-0.11.0-2.21 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6438</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6438" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6438" ref_url="https://www.suse.com/security/cve/CVE-2013-6438" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0967-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1082-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1044-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1045-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00065.html" source="SUSE-SU"/>
    <description>
    The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6438/">CVE-2013-6438</cve>
	<bugzilla href="https://bugzilla.suse.com/869105">SUSE bug 869105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/869106">SUSE bug 869106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/887765">SUSE bug 887765</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6449</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6449" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6449" ref_url="https://www.suse.com/security/cve/CVE-2013-6449" source="SUSE CVE"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7022768" ref_url="https://www.suse.com/support/kb/doc/?id=7022768" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0012-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0015-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0018-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6449/">CVE-2013-6449</cve>
	<bugzilla href="https://bugzilla.suse.com/856687">SUSE bug 856687</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6450</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6450" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6450" ref_url="https://www.suse.com/security/cve/CVE-2013-6450" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0049-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00032.html" source="SUSE-SU"/>
    <description>
    The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context and cause a denial of service (application crash) by interfering with packet delivery, related to ssl/d1_both.c and ssl/t1_enc.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6450/">CVE-2013-6450</cve>
	<bugzilla href="https://bugzilla.suse.com/857203">SUSE bug 857203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/861384">SUSE bug 861384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6462</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6462" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6462" ref_url="https://www.suse.com/security/cve/CVE-2013-6462" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="TID7021434" ref_url="https://www.suse.com/support/kb/doc/?id=7021434" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021738" ref_url="https://www.suse.com/support/kb/doc/?id=7021738" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0073-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0075-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00052.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-6462/">CVE-2013-6462</cve>
	<bugzilla href="https://bugzilla.suse.com/854915">SUSE bug 854915</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882908">SUSE bug 882908</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480420" comment="libXfont-devel-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6473</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6473" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6473" ref_url="https://www.suse.com/security/cve/CVE-2013-6473" source="SUSE CVE"/>
    <description>
    Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers to execute arbitrary code via a large (1) page or (2) line in a URF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6473/">CVE-2013-6473</cve>
	<bugzilla href="https://bugzilla.suse.com/866302">SUSE bug 866302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6474</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6474" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6474" ref_url="https://www.suse.com/security/cve/CVE-2013-6474" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6474/">CVE-2013-6474</cve>
	<bugzilla href="https://bugzilla.suse.com/866302">SUSE bug 866302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6475</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6475" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6475" ref_url="https://www.suse.com/security/cve/CVE-2013-6475" source="SUSE CVE"/>
    <description>
    Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6475/">CVE-2013-6475</cve>
	<bugzilla href="https://bugzilla.suse.com/866302">SUSE bug 866302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6476</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6476" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6476" ref_url="https://www.suse.com/security/cve/CVE-2013-6476" source="SUSE CVE"/>
    <description>
    The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6476/">CVE-2013-6476</cve>
	<bugzilla href="https://bugzilla.suse.com/866302">SUSE bug 866302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6477</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6477" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6477" ref_url="https://www.suse.com/security/cve/CVE-2013-6477" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of service (application crash) via a crafted timestamp value in an XMPP message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6477/">CVE-2013-6477</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6478</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6478" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6478" ref_url="https://www.suse.com/security/cve/CVE-2013-6478" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
    <description>
    gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, which allows user-assisted remote attackers to cause a denial of service (application crash) via a long URL that is examined with a tooltip.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6478/">CVE-2013-6478</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6479</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6479" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6479" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6479" ref_url="https://www.suse.com/security/cve/CVE-2013-6479" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
    <description>
    util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent with the Content-Length header, which allows remote HTTP servers to cause a denial of service (application crash) via a crafted response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6479/">CVE-2013-6479</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6481</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6481" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6481" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6481" ref_url="https://www.suse.com/security/cve/CVE-2013-6481" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
    <description>
    libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash) via a Yahoo! P2P message with a crafted length field, which triggers a buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6481/">CVE-2013-6481</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6482</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6482" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6482" ref_url="https://www.suse.com/security/cve/CVE-2013-6482" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Pidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer dereference and crash) via a crafted (1) SOAP response, (2) OIM XML response, or (3) Content-Length header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6482/">CVE-2013-6482</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6483</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6483" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6483" ref_url="https://www.suse.com/security/cve/CVE-2013-6483" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remote attackers to spoof iq traffic or cause a denial of service (NULL pointer dereference and application crash) via a crafted reply.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6483/">CVE-2013-6483</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6484</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6484" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6484" ref_url="https://www.suse.com/security/cve/CVE-2013-6484" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers to cause a denial of service (out-of-bounds write operation and application crash) by triggering a socket read error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6484/">CVE-2013-6484</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6485</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6485" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6485" ref_url="https://www.suse.com/security/cve/CVE-2013-6485" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid chunk-size field in chunked transfer-coding data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6485/">CVE-2013-6485</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6486</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6486" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6486" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6486" ref_url="https://www.suse.com/security/cve/CVE-2013-6486" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
    <description>
    gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute arbitrary programs via a message containing a file: URL that is improperly handled during construction of an explorer.exe command.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3185.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-6486/">CVE-2013-6486</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6487</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6487" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6487" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6487" ref_url="https://www.suse.com/security/cve/CVE-2013-6487" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000865.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0742-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a large Content-Length value, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-18"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6487/">CVE-2013-6487</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/878540">SUSE bug 878540</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488922" comment="libgadu-devel-1.12.2-1.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488923" comment="libgadu3-1.12.2-1.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6497</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6497" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6497" ref_url="https://www.suse.com/security/cve/CVE-2013-6497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1571-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001204.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00023.html" source="SUSE-SU"/>
    <description>
    clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6497/">CVE-2013-6497</cve>
	<bugzilla href="https://bugzilla.suse.com/1040662">SUSE bug 1040662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/906077">SUSE bug 906077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6629</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6629" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6629" ref_url="https://www.suse.com/security/cve/CVE-2013-6629" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0639-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0728-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0728-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0728-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0732-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000839.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0733-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1959-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0065-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1638-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1645-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00063.html" source="SUSE-SU"/>
    <description>
    The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-07-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6629/">CVE-2013-6629</cve>
	<bugzilla href="https://bugzilla.suse.com/850430">SUSE bug 850430</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/873872">SUSE bug 873872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/873873">SUSE bug 873873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877429">SUSE bug 877429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877430">SUSE bug 877430</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880246">SUSE bug 880246</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6630</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6630" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6630" ref_url="https://www.suse.com/security/cve/CVE-2013-6630" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1959-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0065-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6630/">CVE-2013-6630</cve>
	<bugzilla href="https://bugzilla.suse.com/850430">SUSE bug 850430</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6671</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6671" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6671" ref_url="https://www.suse.com/security/cve/CVE-2013-6671" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1959-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-6671/">CVE-2013-6671</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6672</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6672" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6672" ref_url="https://www.suse.com/security/cve/CVE-2013-6672" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6672/">CVE-2013-6672</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6673</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6673" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6673" ref_url="https://www.suse.com/security/cve/CVE-2013-6673" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1919-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1916-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1917-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1918-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1959-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2013-6673/">CVE-2013-6673</cve>
	<bugzilla href="https://bugzilla.suse.com/854370">SUSE bug 854370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6674</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6674" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6674" ref_url="https://www.suse.com/security/cve/CVE-2013-6674" source="SUSE CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in an IFRAME element, a related issue to CVE-2014-2018.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-6674/">CVE-2013-6674</cve>
	<bugzilla href="https://bugzilla.suse.com/863095">SUSE bug 863095</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6763</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6763" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6763" ref_url="https://www.suse.com/security/cve/CVE-2013-6763" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The uio_mmap_physical function in drivers/uio/uio.c in the Linux kernel before 3.12 does not validate the size of a memory block, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted mmap operations, a different vulnerability than CVE-2013-4511.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6763/">CVE-2013-6763</cve>
	<bugzilla href="https://bugzilla.suse.com/850263">SUSE bug 850263</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136887" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6887</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6887" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6887" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6887" ref_url="https://www.suse.com/security/cve/CVE-2013-6887" source="SUSE CVE"/>
    <description>
    OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6887/">CVE-2013-6887</cve>
	<bugzilla href="https://bugzilla.suse.com/853644">SUSE bug 853644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6954</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6954" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6954" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6954" ref_url="https://www.suse.com/security/cve/CVE-2013-6954" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0639-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0728-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0728-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0728-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0733-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0100-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-01/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1638-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1645-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00063.html" source="SUSE-SU"/>
    <description>
    The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6954/">CVE-2013-6954</cve>
	<bugzilla href="https://bugzilla.suse.com/856522">SUSE bug 856522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/873872">SUSE bug 873872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/873873">SUSE bug 873873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877429">SUSE bug 877429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877430">SUSE bug 877430</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6999</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-6999" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6999" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-6999" ref_url="https://www.suse.com/security/cve/CVE-2013-6999" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** The IsHandleEntrySecure function in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 SP2 does not properly validate the tagPROCESSINFO pW32Job field, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted NtUserValidateHandleSecure call for an owned object.  NOTE: the vendor reportedly disputes the significance of this report, stating that "it appears to be a local DOS ... we don't consider it a security vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-19"/>
	<updated date="2023-02-19"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6999/">CVE-2013-6999</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7038</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7038" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7038" ref_url="https://www.suse.com/security/cve/CVE-2013-7038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002945.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1676-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00089.html" source="SUSE-SU"/>
    <description>
    The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-7038/">CVE-2013-7038</cve>
	<bugzilla href="https://bugzilla.suse.com/854443">SUSE bug 854443</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486460" comment="libmicrohttpd-devel-0.9.57-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482300" comment="libmicrohttpd12-0.9.57-1.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7039</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7039" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7039" ref_url="https://www.suse.com/security/cve/CVE-2013-7039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002945.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1676-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00089.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2013-7039/">CVE-2013-7039</cve>
	<bugzilla href="https://bugzilla.suse.com/854443">SUSE bug 854443</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486460" comment="libmicrohttpd-devel-0.9.57-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482300" comment="libmicrohttpd12-0.9.57-1.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7041</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7041" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7041" ref_url="https://www.suse.com/security/cve/CVE-2013-7041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1645-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002134.html" source="SUSE-SU"/>
    <description>
    The pam_userdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-09-12"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7041/">CVE-2013-7041</cve>
	<bugzilla href="https://bugzilla.suse.com/1123794">SUSE bug 1123794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215217">SUSE bug 1215217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854480">SUSE bug 854480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334112" comment="pam is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336045" comment="pam-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336049" comment="pam-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337609" comment="pam-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336046" comment="pam-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336047" comment="pam-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336048" comment="pam-extra-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7098</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7098" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7098" ref_url="https://www.suse.com/security/cve/CVE-2013-7098" source="SUSE CVE"/>
    <description>
    OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-7098/">CVE-2013-7098</cve>
	<bugzilla href="https://bugzilla.suse.com/1163983">SUSE bug 1163983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489039" comment="openconnect-7.08-4.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489040" comment="openconnect-devel-7.08-4.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489041" comment="openconnect-lang-7.08-4.26 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7171</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7171" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7171" ref_url="https://www.suse.com/security/cve/CVE-2013-7171" source="SUSE CVE"/>
    <description>
    Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-7171/">CVE-2013-7171</cve>
	<bugzilla href="https://bugzilla.suse.com/1160908">SUSE bug 1160908</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655944" comment="clang-checker is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009655944" comment="clang-checker is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009714934" comment="clang7-checker is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009655945" comment="clang5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655946" comment="clang5-checker is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655947" comment="clang5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655948" comment="libLLVM5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655949" comment="libLLVM5-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655950" comment="libLTO5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655951" comment="libclang5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655952" comment="libomp5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348229" comment="llvm5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655953" comment="llvm5-LTO-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655954" comment="llvm5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655955" comment="llvm5-gold is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009659658" comment="clang7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659659" comment="clang7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659660" comment="libLLVM7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659661" comment="libLLVM7-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659662" comment="libLTO7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659654" comment="libc++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659655" comment="libc++1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659656" comment="libc++abi-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659657" comment="libc++abi1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659663" comment="libclang7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659664" comment="libomp7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348230" comment="llvm7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659665" comment="llvm7-LTO-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659666" comment="llvm7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659667" comment="llvm7-gold is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659668" comment="llvm7-polly is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659669" comment="llvm7-polly-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009781771" comment="clang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338849" comment="llvm is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7239</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7239" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7239" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7239" ref_url="https://www.suse.com/security/cve/CVE-2013-7239" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0951-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00041.html" source="SUSE-SU"/>
    <description>
    memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7239/">CVE-2013-7239</cve>
	<bugzilla href="https://bugzilla.suse.com/857188">SUSE bug 857188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488250" comment="memcached-1.5.6-2.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488251" comment="memcached-devel-1.5.6-2.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7263</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7263" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7263" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7263" ref_url="https://www.suse.com/security/cve/CVE-2013-7263" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0531-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-7263/">CVE-2013-7263</cve>
	<bugzilla href="https://bugzilla.suse.com/853040">SUSE bug 853040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/857643">SUSE bug 857643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137264" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7264</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7264" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7264" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7264" ref_url="https://www.suse.com/security/cve/CVE-2013-7264" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0531-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000880.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The l2tp_ip_recvmsg function in net/l2tp/l2tp_ip.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7264/">CVE-2013-7264</cve>
	<bugzilla href="https://bugzilla.suse.com/853040">SUSE bug 853040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/857643">SUSE bug 857643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7265</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7265" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7265" ref_url="https://www.suse.com/security/cve/CVE-2013-7265" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0531-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000880.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The pn_recvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-05"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7265/">CVE-2013-7265</cve>
	<bugzilla href="https://bugzilla.suse.com/853040">SUSE bug 853040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/857643">SUSE bug 857643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7267</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7267" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7267" ref_url="https://www.suse.com/security/cve/CVE-2013-7267" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
    <description>
    The atalk_recvmsg function in net/appletalk/ddp.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-18"/>
	<updated date="2023-05-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7267/">CVE-2013-7267</cve>
	<bugzilla href="https://bugzilla.suse.com/854722">SUSE bug 854722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/857643">SUSE bug 857643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882914">SUSE bug 882914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7268</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7268" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7268" ref_url="https://www.suse.com/security/cve/CVE-2013-7268" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
    <description>
    The ipx_recvmsg function in net/ipx/af_ipx.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-23"/>
	<updated date="2023-05-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7268/">CVE-2013-7268</cve>
	<bugzilla href="https://bugzilla.suse.com/854722">SUSE bug 854722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/857643">SUSE bug 857643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882914">SUSE bug 882914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7269</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7269" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7269" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7269" ref_url="https://www.suse.com/security/cve/CVE-2013-7269" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
    <description>
    The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-17"/>
	<updated date="2023-05-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7269/">CVE-2013-7269</cve>
	<bugzilla href="https://bugzilla.suse.com/854722">SUSE bug 854722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/857643">SUSE bug 857643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882914">SUSE bug 882914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7270</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7270" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7270" ref_url="https://www.suse.com/security/cve/CVE-2013-7270" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
    <description>
    The packet_recvmsg function in net/packet/af_packet.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-17"/>
	<updated date="2023-05-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7270/">CVE-2013-7270</cve>
	<bugzilla href="https://bugzilla.suse.com/854722">SUSE bug 854722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/857643">SUSE bug 857643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882914">SUSE bug 882914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7271</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7271" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7271" ref_url="https://www.suse.com/security/cve/CVE-2013-7271" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
    <description>
    The x25_recvmsg function in net/x25/af_x25.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-20"/>
	<updated date="2023-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7271/">CVE-2013-7271</cve>
	<bugzilla href="https://bugzilla.suse.com/854722">SUSE bug 854722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/857643">SUSE bug 857643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882914">SUSE bug 882914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7290</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7290" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7290" ref_url="https://www.suse.com/security/cve/CVE-2013-7290" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0951-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00041.html" source="SUSE-SU"/>
    <description>
    The do_item_get function in items.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr, a different vulnerability than CVE-2013-0179.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-7290/">CVE-2013-7290</cve>
	<bugzilla href="https://bugzilla.suse.com/858677">SUSE bug 858677</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488250" comment="memcached-1.5.6-2.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488251" comment="memcached-devel-1.5.6-2.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7291</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7291" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7291" ref_url="https://www.suse.com/security/cve/CVE-2013-7291" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0951-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00041.html" source="SUSE-SU"/>
    <description>
    memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-0179 and CVE-2013-7290.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-7291/">CVE-2013-7291</cve>
	<bugzilla href="https://bugzilla.suse.com/858676">SUSE bug 858676</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488250" comment="memcached-1.5.6-2.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488251" comment="memcached-devel-1.5.6-2.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137322" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7322</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7322" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7322" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7322" ref_url="https://www.suse.com/security/cve/CVE-2013-7322" source="SUSE CVE"/>
    <description>
    usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-password (OTP) type and a user name in /etc/users.oath, which causes the wrong line to be updated when invalidating an OTP and allows context-dependent attackers to conduct replay attacks, as demonstrated by a commented out line when using libpam-oath.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7322/">CVE-2013-7322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481452" comment="liboath-devel-2.6.2-1.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480636" comment="liboath0-2.6.2-1.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480637" comment="oath-toolkit-xml-2.6.2-1.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488932" comment="libpskc-devel-2.6.2-1.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488933" comment="libpskc0-2.6.2-1.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7339</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7339" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7339" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7339" ref_url="https://www.suse.com/security/cve/CVE-2013-7339" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00000.html" source="SUSE-SU"/>
    <description>
    The rds_ib_laddr_check function in net/rds/ib.c in the Linux kernel before 3.12.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7339/">CVE-2013-7339</cve>
	<bugzilla href="https://bugzilla.suse.com/869563">SUSE bug 869563</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7353</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7353" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7353" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7353" ref_url="https://www.suse.com/security/cve/CVE-2013-7353" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000833.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0604-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0616-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0618-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00026.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a crafted image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7353/">CVE-2013-7353</cve>
	<bugzilla href="https://bugzilla.suse.com/873124">SUSE bug 873124</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7354</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7354" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7354" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7354" ref_url="https://www.suse.com/security/cve/CVE-2013-7354" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000833.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0604-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0616-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0618-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00026.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png_set_sPLT or (2) png_set_text_2 function, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7354/">CVE-2013-7354</cve>
	<bugzilla href="https://bugzilla.suse.com/873123">SUSE bug 873123</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7422</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7422" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7422" ref_url="https://www.suse.com/security/cve/CVE-2013-7422" source="SUSE CVE"/>
    <description>
    Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a long digit string associated with an invalid backreference within a regular expression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-7422/">CVE-2013-7422</cve>
	<bugzilla href="https://bugzilla.suse.com/915514">SUSE bug 915514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334114" comment="perl is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334114" comment="perl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336057" comment="perl-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337401" comment="perl-base-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336058" comment="perl-doc is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7423</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7423" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7423" ref_url="https://www.suse.com/security/cve/CVE-2013-7423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001305.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0351-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html" source="SUSE-SU"/>
    <description>
    The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of requests that trigger a call to the getaddrinfo function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7423/">CVE-2013-7423</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915526">SUSE bug 915526</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7437</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7437" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7437" ref_url="https://www.suse.com/security/cve/CVE-2013-7437" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0685-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1909-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00034.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-7437/">CVE-2013-7437</cve>
	<bugzilla href="https://bugzilla.suse.com/924904">SUSE bug 924904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486490" comment="libpotrace0-1.15-3.19 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7446</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7446" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7446" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7446" ref_url="https://www.suse.com/security/cve/CVE-2013-7446" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0585-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0747-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0749-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0751-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0753-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0754-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0756-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2000-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2001-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2006-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2009-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7446/">CVE-2013-7446</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955654">SUSE bug 955654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955837">SUSE bug 955837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7447</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7447" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7447" ref_url="https://www.suse.com/security/cve/CVE-2013-7447" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002336.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2366-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2374-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00089.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7447/">CVE-2013-7447</cve>
	<bugzilla href="https://bugzilla.suse.com/966682">SUSE bug 966682</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480319" comment="gtk2-devel-2.24.32-2.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480320" comment="gtk2-lang-2.24.32-2.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480321" comment="gtk2-tools-2.24.32-2.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480322" comment="libgtk-2_0-0-2.24.32-2.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480323" comment="typelib-1_0-Gtk-2_0-2.24.32-2.27 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482657" comment="eog-3.26.2-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482658" comment="eog-devel-3.26.2-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482659" comment="eog-lang-3.26.2-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482735" comment="gtk2-data-2.24.32-2.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482736" comment="gtk2-tools-32bit-2.24.32-2.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482737" comment="libgtk-2_0-0-32bit-2.24.32-2.27 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489061" comment="gnome-photos-3.26.3-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489062" comment="gnome-photos-lang-3.26.3-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489063" comment="gnome-shell-search-provider-gnome-photos-3.26.3-4.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7459</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7459" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7459" ref_url="https://www.suse.com/security/cve/CVE-2013-7459" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1744-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2350-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00022.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7459/">CVE-2013-7459</cve>
	<bugzilla href="https://bugzilla.suse.com/1017420">SUSE bug 1017420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047666">SUSE bug 1047666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087140">SUSE bug 1087140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480899" comment="python3-pycrypto-2.6.1-1.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7488</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7488" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7488" ref_url="https://www.suse.com/security/cve/CVE-2013-7488" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008232.html" source="SUSE-SU"/>
    <description>
    perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-7488/">CVE-2013-7488</cve>
	<bugzilla href="https://bugzilla.suse.com/1168934">SUSE bug 1168934</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009493147" comment="perl-Convert-ASN1-0.27-1.6.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7490</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7490" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7490" ref_url="https://www.suse.com/security/cve/CVE-2013-7490" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007520.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007519.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-7490/">CVE-2013-7490</cve>
	<bugzilla href="https://bugzilla.suse.com/1176496">SUSE bug 1176496</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334346" comment="perl-DBI is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7491</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-7491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7491" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-7491" ref_url="https://www.suse.com/security/cve/CVE-2013-7491" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007520.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-7491/">CVE-2013-7491</cve>
	<bugzilla href="https://bugzilla.suse.com/1176493">SUSE bug 1176493</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334346" comment="perl-DBI is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0004</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0004" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0004" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0004" ref_url="https://www.suse.com/security/cve/CVE-2014-0004" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0388-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0389-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0390-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00053.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0004/">CVE-2014-0004</cve>
	<bugzilla href="https://bugzilla.suse.com/865854">SUSE bug 865854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481520" comment="libudisks2-0-2.6.5-3.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481521" comment="typelib-1_0-UDisks-2_0-2.6.5-3.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481522" comment="udisks2-2.6.5-3.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481523" comment="udisks2-devel-2.6.5-3.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481524" comment="udisks2-lang-2.6.5-3.7.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0012</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0012" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0012" ref_url="https://www.suse.com/security/cve/CVE-2014-0012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001522.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2465-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0012/">CVE-2014-0012</cve>
	<bugzilla href="https://bugzilla.suse.com/858239">SUSE bug 858239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481633" comment="python3-Jinja2-2.10.1-3.5.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0015</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0015" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0015" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0015" ref_url="https://www.suse.com/security/cve/CVE-2014-0015" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0171-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000711.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0175-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000712.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0175-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000718.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0267-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0274-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00066.html" source="SUSE-SU"/>
    <description>
    cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-0015/">CVE-2014-0015</cve>
	<bugzilla href="https://bugzilla.suse.com/858673">SUSE bug 858673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/868627">SUSE bug 868627</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880252">SUSE bug 880252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882520">SUSE bug 882520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927556">SUSE bug 927556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962983">SUSE bug 962983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0016</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0016" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0016" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0016" ref_url="https://www.suse.com/security/cve/CVE-2014-0016" source="SUSE CVE"/>
    <description>
    stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to use the same entropy pool and allows remote attackers to obtain private keys for EC (ECDSA) or DSA certificates.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0016/">CVE-2014-0016</cve>
	<bugzilla href="https://bugzilla.suse.com/866278">SUSE bug 866278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/866286">SUSE bug 866286</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488296" comment="stunnel-5.44-1.29 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0019</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0019" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0019" ref_url="https://www.suse.com/security/cve/CVE-2014-0019" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001850.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0760-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00043.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-0019/">CVE-2014-0019</cve>
	<bugzilla href="https://bugzilla.suse.com/860991">SUSE bug 860991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927161">SUSE bug 927161</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481656" comment="socat-1.7.3.2-4.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0020</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0020" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0020" ref_url="https://www.suse.com/security/cve/CVE-2014-0020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) via a crafted message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0020/">CVE-2014-0020</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0021</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0021" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0021" ref_url="https://www.suse.com/security/cve/CVE-2014-0021" source="SUSE CVE"/>
    <description>
    Chrony before 1.29.1 has traffic amplification in cmdmon protocol
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-0021/">CVE-2014-0021</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481059" comment="chrony-3.2-9.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0032</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0032" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0032" ref_url="https://www.suse.com/security/cve/CVE-2014-0032" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-April/000795.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0334-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET, as demonstrated by the "svn ls http://svn.example.com" command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0032/">CVE-2014-0032</cve>
	<bugzilla href="https://bugzilla.suse.com/862459">SUSE bug 862459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0038</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0038" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0038" ref_url="https://www.suse.com/security/cve/CVE-2014-0038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html" source="SUSE-SU"/>
    <description>
    The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0038/">CVE-2014-0038</cve>
	<bugzilla href="https://bugzilla.suse.com/860993">SUSE bug 860993</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0055</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0055" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0055" ref_url="https://www.suse.com/security/cve/CVE-2014-0055" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1246-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00056.html" source="SUSE-SU"/>
    <description>
    The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0055/">CVE-2014-0055</cve>
	<bugzilla href="https://bugzilla.suse.com/870173">SUSE bug 870173</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0069</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0069" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0069" ref_url="https://www.suse.com/security/cve/CVE-2014-0069" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0531-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0069/">CVE-2014-0069</cve>
	<bugzilla href="https://bugzilla.suse.com/864025">SUSE bug 864025</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0076</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0076" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0076" ref_url="https://www.suse.com/security/cve/CVE-2014-0076" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-April/000793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-April/000794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-April/000796.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0761-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/001012.html" source="SUSE-SU"/>
		<reference ref_id="TID7010166" ref_url="https://www.suse.com/support/kb/doc/?id=7010166" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7015264" ref_url="https://www.suse.com/support/kb/doc?id=7015264" source="SUSE-SU"/>
		<reference ref_id="TID7015300" ref_url="https://www.suse.com/support/kb/doc?id=7015300" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0480-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-0076/">CVE-2014-0076</cve>
	<bugzilla href="https://bugzilla.suse.com/869945">SUSE bug 869945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880891">SUSE bug 880891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883126">SUSE bug 883126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885777">SUSE bug 885777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0077</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0077" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0077" ref_url="https://www.suse.com/security/cve/CVE-2014-0077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000987.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1246-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00056.html" source="SUSE-SU"/>
    <description>
    drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service (memory corruption and host OS crash) or possibly gain privileges on the host OS via crafted packets, related to the handle_rx and get_rx_bufs functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0077/">CVE-2014-0077</cve>
	<bugzilla href="https://bugzilla.suse.com/870173">SUSE bug 870173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/870576">SUSE bug 870576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0098</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0098" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0098" ref_url="https://www.suse.com/security/cve/CVE-2014-0098" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0967-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1082-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1044-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1045-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00065.html" source="SUSE-SU"/>
    <description>
    The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0098/">CVE-2014-0098</cve>
	<bugzilla href="https://bugzilla.suse.com/869106">SUSE bug 869106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/887765">SUSE bug 887765</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0105</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0105" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0105" ref_url="https://www.suse.com/security/cve/CVE-2014-0105" source="SUSE CVE"/>
    <description>
    The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an "interaction between eventlet and python-memcached."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0105/">CVE-2014-0105</cve>
	<bugzilla href="https://bugzilla.suse.com/870102">SUSE bug 870102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488086" comment="python3-keystoneclient-3.15.0-2.33 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0114</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0114" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0114" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0114" ref_url="https://www.suse.com/security/cve/CVE-2014-0114" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="TID7021433" ref_url="https://www.suse.com/support/kb/doc/?id=7021433" source="SUSE-SU"/>
		<reference ref_id="TID7021937" ref_url="https://www.suse.com/support/kb/doc/?id=7021937" source="SUSE-SU"/>
    <description>
    Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0114/">CVE-2014-0114</cve>
	<bugzilla href="https://bugzilla.suse.com/778464">SUSE bug 778464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/875455">SUSE bug 875455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885963">SUSE bug 885963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009739619" comment="apache-commons-beanutils is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0117</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0117" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0117" ref_url="https://www.suse.com/security/cve/CVE-2014-0117" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1044-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of service (child-process crash) via a crafted HTTP Connection header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0117/">CVE-2014-0117</cve>
	<bugzilla href="https://bugzilla.suse.com/887767">SUSE bug 887767</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0118</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0118" ref_url="https://www.suse.com/security/cve/CVE-2014-0118" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003365.html" source="SUSE-SU"/>
    <description>
    The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0118/">CVE-2014-0118</cve>
	<bugzilla href="https://bugzilla.suse.com/1078450">SUSE bug 1078450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/887769">SUSE bug 887769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0131</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0131" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0131" ref_url="https://www.suse.com/security/cve/CVE-2014-0131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0131/">CVE-2014-0131</cve>
	<bugzilla href="https://bugzilla.suse.com/824295">SUSE bug 824295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/867723">SUSE bug 867723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/869564">SUSE bug 869564</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0138</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0138" ref_url="https://www.suse.com/security/cve/CVE-2014-0138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0691-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0530-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0598-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00009.html" source="SUSE-SU"/>
    <description>
    The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0138/">CVE-2014-0138</cve>
	<bugzilla href="https://bugzilla.suse.com/868627">SUSE bug 868627</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880252">SUSE bug 880252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882520">SUSE bug 882520</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0139</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0139" ref_url="https://www.suse.com/security/cve/CVE-2014-0139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0691-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0530-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0598-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00009.html" source="SUSE-SU"/>
    <description>
    cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0139/">CVE-2014-0139</cve>
	<bugzilla href="https://bugzilla.suse.com/868629">SUSE bug 868629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880252">SUSE bug 880252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882520">SUSE bug 882520</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481214" comment="lftp-4.8.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0155</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0155" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0155" ref_url="https://www.suse.com/security/cve/CVE-2014-0155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
    <description>
    The ioapic_deliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvm_irq_delivery_to_apic return value, which allows guest OS users to cause a denial of service (host OS crash) via a crafted entry in the redirection table of an I/O APIC. NOTE: the affected code was moved to the ioapic_service function before the vulnerability was announced.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-0155/">CVE-2014-0155</cve>
	<bugzilla href="https://bugzilla.suse.com/824295">SUSE bug 824295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/872540">SUSE bug 872540</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0160</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0160" ref_url="https://www.suse.com/security/cve/CVE-2014-0160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2014:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="TID7014878" ref_url="https://www.suse.com/support/kb/doc/?id=7014878" source="SUSE-SU"/>
		<reference ref_id="TID7014879" ref_url="https://www.suse.com/support/kb/doc?id=7014879" source="SUSE-SU"/>
		<reference ref_id="TID7014920" ref_url="https://www.suse.com/support/kb/doc/?id=7014920" source="SUSE-SU"/>
		<reference ref_id="TID7014929" ref_url="https://www.suse.com/support/kb/doc/?id=7014929" source="SUSE-SU"/>
		<reference ref_id="TID7014961" ref_url="https://www.suse.com/support/kb/doc/?id=7014961" source="SUSE-SU"/>
		<reference ref_id="TID7014998" ref_url="https://www.suse.com/support/kb/doc/?id=7014998" source="SUSE-SU"/>
		<reference ref_id="TID7017332" ref_url="https://www.suse.com/support/kb/doc/?id=7017332" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021433" ref_url="https://www.suse.com/support/kb/doc/?id=7021433" source="SUSE-SU"/>
		<reference ref_id="TID7021434" ref_url="https://www.suse.com/support/kb/doc/?id=7021434" source="SUSE-SU"/>
		<reference ref_id="TID7021489" ref_url="https://www.suse.com/support/kb/doc/?id=7021489" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021738" ref_url="https://www.suse.com/support/kb/doc/?id=7021738" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021874" ref_url="https://www.suse.com/support/kb/doc/?id=7021874" source="SUSE-SU"/>
		<reference ref_id="TID7021901" ref_url="https://www.suse.com/support/kb/doc/?id=7021901" source="SUSE-SU"/>
		<reference ref_id="TID7021974" ref_url="https://www.suse.com/support/kb/doc/?id=7021974" source="SUSE-SU"/>
		<reference ref_id="TID7021992" ref_url="https://www.suse.com/support/kb/doc/?id=7021992" source="SUSE-SU"/>
		<reference ref_id="TID7022038" ref_url="https://www.suse.com/support/kb/doc/?id=7022038" source="SUSE-SU"/>
		<reference ref_id="TID7022077" ref_url="https://www.suse.com/support/kb/doc/?id=7022077" source="SUSE-SU"/>
		<reference ref_id="TID7022768" ref_url="https://www.suse.com/support/kb/doc/?id=7022768" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0492-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0560-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0719-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00079.html" source="SUSE-SU"/>
    <description>
    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-0160/">CVE-2014-0160</cve>
	<bugzilla href="https://bugzilla.suse.com/872299">SUSE bug 872299</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488296" comment="stunnel-5.44-1.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0172</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0172" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0172" ref_url="https://www.suse.com/security/cve/CVE-2014-0172" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0974-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00005.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0172/">CVE-2014-0172</cve>
	<bugzilla href="https://bugzilla.suse.com/872785">SUSE bug 872785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480205" comment="elfutils-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480206" comment="elfutils-lang-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480207" comment="libasm-devel-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480208" comment="libasm1-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480209" comment="libdw-devel-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480210" comment="libdw1-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480211" comment="libdw1-32bit-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480212" comment="libebl-devel-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480213" comment="libebl-plugins-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480214" comment="libebl-plugins-32bit-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480215" comment="libelf-devel-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480216" comment="libelf1-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480217" comment="libelf1-32bit-0.168-2.164 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0181</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0181" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0181" ref_url="https://www.suse.com/security/cve/CVE-2014-0181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass intended access restrictions and modify network configurations by using a Netlink socket for the (1) stdout or (2) stderr of a setuid program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0181/">CVE-2014-0181</cve>
	<bugzilla href="https://bugzilla.suse.com/875051">SUSE bug 875051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0185</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0185" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0185" ref_url="https://www.suse.com/security/cve/CVE-2014-0185" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0784-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0786-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1685-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00012.html" source="SUSE-SU"/>
    <description>
    sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0185/">CVE-2014-0185</cve>
	<bugzilla href="https://bugzilla.suse.com/868624">SUSE bug 868624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/875826">SUSE bug 875826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0191</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0191" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0191" ref_url="https://www.suse.com/security/cve/CVE-2014-0191" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002905.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008797.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0645-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0701-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0716-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0741-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0753-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
    <description>
    The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0191/">CVE-2014-0191</cve>
	<bugzilla href="https://bugzilla.suse.com/1014873">SUSE bug 1014873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/876652">SUSE bug 876652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877506">SUSE bug 877506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996079">SUSE bug 996079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0195</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0195" ref_url="https://www.suse.com/security/cve/CVE-2014-0195" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0743-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7015189" ref_url="https://www.suse.com/support/kb/doc?id=7015189" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0765-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0195/">CVE-2014-0195</cve>
	<bugzilla href="https://bugzilla.suse.com/880891">SUSE bug 880891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885777">SUSE bug 885777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915913">SUSE bug 915913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0196</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0196" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0196" ref_url="https://www.suse.com/security/cve/CVE-2014-0196" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0667-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0683-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="TID7015061" ref_url="https://www.suse.com/support/kb/doc?id=7015061" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO &amp; !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0196/">CVE-2014-0196</cve>
	<bugzilla href="https://bugzilla.suse.com/871252">SUSE bug 871252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/875690">SUSE bug 875690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877345">SUSE bug 877345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/879878">SUSE bug 879878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933423">SUSE bug 933423</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0198</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0198" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0198" ref_url="https://www.suse.com/security/cve/CVE-2014-0198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0743-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="TID7015189" ref_url="https://www.suse.com/support/kb/doc?id=7015189" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0634-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00037.html" source="SUSE-SU"/>
    <description>
    The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0198/">CVE-2014-0198</cve>
	<bugzilla href="https://bugzilla.suse.com/876282">SUSE bug 876282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880891">SUSE bug 880891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885777">SUSE bug 885777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915913">SUSE bug 915913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0203</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0203" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0203" ref_url="https://www.suse.com/security/cve/CVE-2014-0203" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
    <description>
    The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service (incorrect free operations and system crash) via an open system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-0203/">CVE-2014-0203</cve>
	<bugzilla href="https://bugzilla.suse.com/883526">SUSE bug 883526</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0209</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0209" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0209" ref_url="https://www.suse.com/security/cve/CVE-2014-0209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0711-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0209/">CVE-2014-0209</cve>
	<bugzilla href="https://bugzilla.suse.com/857544">SUSE bug 857544</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480420" comment="libXfont-devel-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0210</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0210" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0210" ref_url="https://www.suse.com/security/cve/CVE-2014-0210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0711-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the (1) _fs_recv_conn_setup, (2) fs_read_open_font, (3) fs_read_query_info, (4) fs_read_extent_info, (5) fs_read_glyphs, (6) fs_read_list, or (7) fs_read_list_info function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0210/">CVE-2014-0210</cve>
	<bugzilla href="https://bugzilla.suse.com/857544">SUSE bug 857544</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480420" comment="libXfont-devel-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0211</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0211" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0211" ref_url="https://www.suse.com/security/cve/CVE-2014-0211" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000861.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000904.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0711-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0211/">CVE-2014-0211</cve>
	<bugzilla href="https://bugzilla.suse.com/857544">SUSE bug 857544</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480420" comment="libXfont-devel-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0221</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0221" ref_url="https://www.suse.com/security/cve/CVE-2014-0221" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0761-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/001012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0743-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="TID7008708" ref_url="https://www.suse.com/support/kb/doc/?id=7008708" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7015162" ref_url="https://www.suse.com/support/kb/doc?id=7015162" source="SUSE-SU"/>
		<reference ref_id="TID7015189" ref_url="https://www.suse.com/support/kb/doc?id=7015189" source="SUSE-SU"/>
		<reference ref_id="TID7015264" ref_url="https://www.suse.com/support/kb/doc?id=7015264" source="SUSE-SU"/>
		<reference ref_id="TID7015300" ref_url="https://www.suse.com/support/kb/doc?id=7015300" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0765-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0221/">CVE-2014-0221</cve>
	<bugzilla href="https://bugzilla.suse.com/880891">SUSE bug 880891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883126">SUSE bug 883126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885777">SUSE bug 885777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915913">SUSE bug 915913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0222</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0222" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0222" ref_url="https://www.suse.com/security/cve/CVE-2014-0222" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-October/001032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0222/">CVE-2014-0222</cve>
	<bugzilla href="https://bugzilla.suse.com/1072223">SUSE bug 1072223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877642">SUSE bug 877642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964925">SUSE bug 964925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0223</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0223" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0223" ref_url="https://www.suse.com/security/cve/CVE-2014-0223" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-October/001032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a large image size, which triggers a buffer overflow or out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0223/">CVE-2014-0223</cve>
	<bugzilla href="https://bugzilla.suse.com/877645">SUSE bug 877645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0224</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0224" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0224" ref_url="https://www.suse.com/security/cve/CVE-2014-0224" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0761-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/001012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0743-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7008708" ref_url="https://www.suse.com/support/kb/doc/?id=7008708" source="SUSE-SU"/>
		<reference ref_id="TID7010166" ref_url="https://www.suse.com/support/kb/doc/?id=7010166" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7015158" ref_url="https://www.suse.com/support/kb/doc/?id=7015158" source="SUSE-SU"/>
		<reference ref_id="TID7015162" ref_url="https://www.suse.com/support/kb/doc?id=7015162" source="SUSE-SU"/>
		<reference ref_id="TID7015189" ref_url="https://www.suse.com/support/kb/doc?id=7015189" source="SUSE-SU"/>
		<reference ref_id="TID7015264" ref_url="https://www.suse.com/support/kb/doc?id=7015264" source="SUSE-SU"/>
		<reference ref_id="TID7015300" ref_url="https://www.suse.com/support/kb/doc?id=7015300" source="SUSE-SU"/>
		<reference ref_id="TID7017332" ref_url="https://www.suse.com/support/kb/doc/?id=7017332" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021432" ref_url="https://www.suse.com/support/kb/doc/?id=7021432" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021739" ref_url="https://www.suse.com/support/kb/doc/?id=7021739" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021990" ref_url="https://www.suse.com/support/kb/doc/?id=7021990" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="TID7022768" ref_url="https://www.suse.com/support/kb/doc/?id=7022768" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0765-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-0224/">CVE-2014-0224</cve>
	<bugzilla href="https://bugzilla.suse.com/1146657">SUSE bug 1146657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880891">SUSE bug 880891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/881743">SUSE bug 881743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883126">SUSE bug 883126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885777">SUSE bug 885777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/892403">SUSE bug 892403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901237">SUSE bug 901237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903703">SUSE bug 903703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905018">SUSE bug 905018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914447">SUSE bug 914447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915913">SUSE bug 915913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916239">SUSE bug 916239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0226</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0226" ref_url="https://www.suse.com/security/cve/CVE-2014-0226" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0967-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1082-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1044-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1045-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00065.html" source="SUSE-SU"/>
    <description>
    Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0226/">CVE-2014-0226</cve>
	<bugzilla href="https://bugzilla.suse.com/887765">SUSE bug 887765</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0231</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0231" ref_url="https://www.suse.com/security/cve/CVE-2014-0231" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0967-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1082-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1044-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1045-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00065.html" source="SUSE-SU"/>
    <description>
    The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script that does not read from its stdin file descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0231/">CVE-2014-0231</cve>
	<bugzilla href="https://bugzilla.suse.com/887768">SUSE bug 887768</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0240</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0240" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0240" ref_url="https://www.suse.com/security/cve/CVE-2014-0240" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000868.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0794-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000913.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000937.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0782-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00022.html" source="SUSE-SU"/>
    <description>
    The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0240/">CVE-2014-0240</cve>
	<bugzilla href="https://bugzilla.suse.com/878550">SUSE bug 878550</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488084" comment="apache2-mod_wsgi-4.5.18-2.27 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488085" comment="apache2-mod_wsgi-python3-4.5.18-2.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0249</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0249" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0249" ref_url="https://www.suse.com/security/cve/CVE-2014-0249" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2579-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002342.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1407-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2651-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00103.html" source="SUSE-SU"/>
    <description>
    The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-0249/">CVE-2014-0249</cve>
	<bugzilla href="https://bugzilla.suse.com/880245">SUSE bug 880245</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481381" comment="libipa_hbac-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481382" comment="libipa_hbac0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481383" comment="libsss_certmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481384" comment="libsss_certmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481385" comment="libsss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481386" comment="libsss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481387" comment="libsss_nss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481388" comment="libsss_nss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481389" comment="libsss_simpleifp-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481390" comment="libsss_simpleifp0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481391" comment="python3-sssd-config-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481392" comment="sssd-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481393" comment="sssd-32bit-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481394" comment="sssd-ad-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481395" comment="sssd-dbus-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481396" comment="sssd-ipa-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481397" comment="sssd-krb5-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481398" comment="sssd-krb5-common-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481399" comment="sssd-ldap-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481400" comment="sssd-proxy-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481401" comment="sssd-tools-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481402" comment="sssd-wbclient-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481403" comment="sssd-wbclient-devel-1.16.1-3.18.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0250</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0250" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0250" ref_url="https://www.suse.com/security/cve/CVE-2014-0250" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002324.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0862-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0250/">CVE-2014-0250</cve>
	<bugzilla href="https://bugzilla.suse.com/880317">SUSE bug 880317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975218">SUSE bug 975218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489056" comment="freerdp-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489057" comment="freerdp-devel-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489058" comment="libfreerdp2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489059" comment="libwinpr2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489060" comment="winpr2-devel-2.0.0~rc4-8.4 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140333" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0333</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0333" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0333" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0333" ref_url="https://www.suse.com/security/cve/CVE-2014-0333" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0358-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00029.html" source="SUSE-SU"/>
    <description>
    The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0333/">CVE-2014-0333</cve>
	<bugzilla href="https://bugzilla.suse.com/866298">SUSE bug 866298</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0467</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0467" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0467" ref_url="https://www.suse.com/security/cve/CVE-2014-0467" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0434-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0436-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00085.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of service (crash) via a crafted RFC2047 header line, related to address expansion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0467/">CVE-2014-0467</cve>
	<bugzilla href="https://bugzilla.suse.com/868115">SUSE bug 868115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481600" comment="mutt-1.10.1-3.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481601" comment="mutt-doc-1.10.1-3.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481602" comment="mutt-lang-1.10.1-3.3.4 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0475</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0475" ref_url="https://www.suse.com/security/cve/CVE-2014-0475" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00009.html" source="SUSE-SU"/>
    <description>
    Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly have other unspecified impact via a .. (dot dot) in a (1) LC_*, (2) LANG, or other locale environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0475/">CVE-2014-0475</cve>
	<bugzilla href="https://bugzilla.suse.com/887022">SUSE bug 887022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/896776">SUSE bug 896776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916222">SUSE bug 916222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0591</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0591" ref_url="https://www.suse.com/security/cve/CVE-2014-0591" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-January/000714.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0480-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0202-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00019.html" source="SUSE-SU"/>
    <description>
    The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0591/">CVE-2014-0591</cve>
	<bugzilla href="https://bugzilla.suse.com/858639">SUSE bug 858639</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0791</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-0791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0791" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-0791" ref_url="https://www.suse.com/security/cve/CVE-2014-0791" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002324.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0862-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2400-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2402-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00102.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0791/">CVE-2014-0791</cve>
	<bugzilla href="https://bugzilla.suse.com/857491">SUSE bug 857491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975218">SUSE bug 975218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489056" comment="freerdp-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489057" comment="freerdp-devel-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489058" comment="libfreerdp2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489059" comment="libwinpr2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489060" comment="winpr2-devel-2.0.0~rc4-8.4 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201410070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-10070</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-10070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-10070" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-10070" ref_url="https://www.suse.com/security/cve/CVE-2014-10070" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1072-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010436.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00073.html" source="SUSE-SU"/>
    <description>
    zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That could allow local privilege escalation, under some specific and atypical conditions where zsh is being invoked in privilege-elevation contexts when the environment has not been properly sanitized, such as when zsh is invoked by sudo on systems where "env_reset" has been disabled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-10070/">CVE-2014-10070</cve>
	<bugzilla href="https://bugzilla.suse.com/1082885">SUSE bug 1082885</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200039">SUSE bug 1200039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200209">SUSE bug 1200209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339511" comment="zsh is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201410071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-10071</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-10071" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-10071" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-10071" ref_url="https://www.suse.com/security/cve/CVE-2014-10071" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1072-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010436.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00073.html" source="SUSE-SU"/>
    <description>
    In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the "&gt;&amp; fd" syntax.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2014-10071/">CVE-2014-10071</cve>
	<bugzilla href="https://bugzilla.suse.com/1082977">SUSE bug 1082977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200039">SUSE bug 1200039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339511" comment="zsh is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201410072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-10072</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-10072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-10072" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-10072" ref_url="https://www.suse.com/security/cve/CVE-2014-10072" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1072-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010436.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00073.html" source="SUSE-SU"/>
    <description>
    In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2014-10072/">CVE-2014-10072</cve>
	<bugzilla href="https://bugzilla.suse.com/1082975">SUSE bug 1082975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200039">SUSE bug 1200039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339511" comment="zsh is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201410401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-10401</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-10401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-10401" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-10401" ref_url="https://www.suse.com/security/cve/CVE-2014-10401" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007805.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2051-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMGB54ZNHPYCQOCNFWII4FF7QYGHLHOE/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2064-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/43QNN7Q3HNDCS2NCHIGGBFFQET5XKUHO/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-10401/">CVE-2014-10401</cve>
	<bugzilla href="https://bugzilla.suse.com/1176492">SUSE bug 1176492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334165" comment="perl-DBI is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492828" comment="perl-DBI-1.639-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201410402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-10402</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-10402" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-10402" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-10402" ref_url="https://www.suse.com/security/cve/CVE-2014-10402" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007805.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2051-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMGB54ZNHPYCQOCNFWII4FF7QYGHLHOE/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2064-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/43QNN7Q3HNDCS2NCHIGGBFFQET5XKUHO/" source="SUSE-SU"/>
    <description>
    An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-10402/">CVE-2014-10402</cve>
	<bugzilla href="https://bugzilla.suse.com/1176492">SUSE bug 1176492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334165" comment="perl-DBI is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492828" comment="perl-DBI-1.639-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1477</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1477" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1477" ref_url="https://www.suse.com/security/cve/CVE-2014-1477" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-1477/">CVE-2014-1477</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/862345">SUSE bug 862345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1478</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1478" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1478" ref_url="https://www.suse.com/security/cve/CVE-2014-1478" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the MPostWriteBarrier class in js/src/jit/MIR.h and stack alignment in js/src/jit/AsmJS.cpp in OdinMonkey, and unknown other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1478/">CVE-2014-1478</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1479</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1479" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1479" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1479" ref_url="https://www.suse.com/security/cve/CVE-2014-1479" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent certain cloning operations, which allows remote attackers to bypass intended restrictions on XUL content via vectors involving XBL content scopes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1479/">CVE-2014-1479</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/862348">SUSE bug 862348</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1480</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1480" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1480" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1480" ref_url="https://www.suse.com/security/cve/CVE-2014-1480" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers to conduct clickjacking attacks, and trigger unintended launching of a downloaded file, via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1480/">CVE-2014-1480</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1481</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1481" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1481" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1481" ref_url="https://www.suse.com/security/cve/CVE-2014-1481" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to bypass intended restrictions on window objects by leveraging inconsistency in native getter methods across different JavaScript engines.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-1481/">CVE-2014-1481</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/862309">SUSE bug 862309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1482</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1482" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1482" ref_url="https://www.suse.com/security/cve/CVE-2014-1482" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    RasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent access to discarded data, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect write operations) via crafted image data, as demonstrated by Goo Create.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-1482/">CVE-2014-1482</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/862356">SUSE bug 862356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1483</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1483" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1483" ref_url="https://www.suse.com/security/cve/CVE-2014-1483" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1483/">CVE-2014-1483</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/862360">SUSE bug 862360</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1484</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1484" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1484" ref_url="https://www.suse.com/security/cve/CVE-2014-1484" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1484/">CVE-2014-1484</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1485</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1485" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1485" ref_url="https://www.suse.com/security/cve/CVE-2014-1485" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote attackers to execute arbitrary XSLT code by leveraging insufficient style-src restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1485/">CVE-2014-1485</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1486</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1486" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1486" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1486" ref_url="https://www.suse.com/security/cve/CVE-2014-1486" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving unspecified Content-Type values for image data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-1486/">CVE-2014-1486</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1487</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1487" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1487" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1487" ref_url="https://www.suse.com/security/cve/CVE-2014-1487" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Policy and obtain sensitive authentication information via vectors involving error messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-1487/">CVE-2014-1487</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1488</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1488" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1488" ref_url="https://www.suse.com/security/cve/CVE-2014-1488" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a worker process that has performed a cross-thread object-passing operation in conjunction with use of asm.js.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1488/">CVE-2014-1488</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1489</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1489" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1489" ref_url="https://www.suse.com/security/cve/CVE-2014-1489" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1489/">CVE-2014-1489</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1490</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1490" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1490" ref_url="https://www.suse.com/security/cve/CVE-2014-1490" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors involving a resumption handshake that triggers incorrect replacement of a session ticket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1490/">CVE-2014-1490</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/862300">SUSE bug 862300</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1491</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1491" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1491" ref_url="https://www.suse.com/security/cve/CVE-2014-1491" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0248-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1491/">CVE-2014-1491</cve>
	<bugzilla href="https://bugzilla.suse.com/861847">SUSE bug 861847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/862289">SUSE bug 862289</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1492</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1492" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1492" ref_url="https://www.suse.com/security/cve/CVE-2014-1492" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0950-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1492/">CVE-2014-1492</cve>
	<bugzilla href="https://bugzilla.suse.com/869827">SUSE bug 869827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/926974">SUSE bug 926974</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1493</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1493" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1493" ref_url="https://www.suse.com/security/cve/CVE-2014-1493" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-1493/">CVE-2014-1493</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1494</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1494" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1494" ref_url="https://www.suse.com/security/cve/CVE-2014-1494" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1494/">CVE-2014-1494</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1496</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1496" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1496" ref_url="https://www.suse.com/security/cve/CVE-2014-1496" source="SUSE CVE"/>
    <description>
    Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during an update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-1496/">CVE-2014-1496</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1497</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1497" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1497" ref_url="https://www.suse.com/security/cve/CVE-2014-1497" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap memory, cause a denial of service (out-of-bounds read and application crash), or possibly have unspecified other impact via a crafted WAV file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-1497/">CVE-2014-1497</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1498</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1498" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1498" ref_url="https://www.suse.com/security/cve/CVE-2014-1498" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to cause a denial of service (application crash) via vectors that trigger generation of a key that supports the Elliptic Curve ec-dual-use algorithm.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1498/">CVE-2014-1498</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1499</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1499" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1499" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1499" ref_url="https://www.suse.com/security/cve/CVE-2014-1499" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1499/">CVE-2014-1499</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1500</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1500" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1500" ref_url="https://www.suse.com/security/cve/CVE-2014-1500" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events that trigger background JavaScript execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1500/">CVE-2014-1500</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1501</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1501" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1501" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1501" ref_url="https://www.suse.com/security/cve/CVE-2014-1501" source="SUSE CVE"/>
    <description>
    Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab" menu selection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1501/">CVE-2014-1501</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1502</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1502" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1502" ref_url="https://www.suse.com/security/cve/CVE-2014-1502" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the Same Origin Policy and render content in a different domain via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-08"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1502/">CVE-2014-1502</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1504</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1504" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1504" ref_url="https://www.suse.com/security/cve/CVE-2014-1504" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document that is accessed after a browser restart.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1504/">CVE-2014-1504</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1505</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1505" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1505" ref_url="https://www.suse.com/security/cve/CVE-2014-1505" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive displacement-correlation information, and possibly bypass the Same Origin Policy and read text from a different domain, via a timing attack involving feDisplacementMap elements, a related issue to CVE-2013-1693.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-03"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-1505/">CVE-2014-1505</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1506</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1506" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1506" ref_url="https://www.suse.com/security/cve/CVE-2014-1506" source="SUSE CVE"/>
    <description>
    Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service (application crash), via a crafted application that specifies Android Crash Reporter arguments.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1506/">CVE-2014-1506</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1507</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1507" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1507" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1507" ref_url="https://www.suse.com/security/cve/CVE-2014-1507" source="SUSE CVE"/>
    <description>
    Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox protection mechanism, and read or modify arbitrary files, via a crafted application that uses a relative pathname for a DeviceStorageFile object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1507/">CVE-2014-1507</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1508</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1508" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1508" ref_url="https://www.suse.com/security/cve/CVE-2014-1508" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of service (out-of-bounds read and application crash), or possibly bypass the Same Origin Policy via vectors involving MathML polygon rendering.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1508/">CVE-2014-1508</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1509</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1509" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1509" ref_url="https://www.suse.com/security/cve/CVE-2014-1509" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1509/">CVE-2014-1509</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/869339">SUSE bug 869339</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1510</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1510" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1510" ref_url="https://www.suse.com/security/cve/CVE-2014-1510" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1510/">CVE-2014-1510</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1511</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1511" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1511" ref_url="https://www.suse.com/security/cve/CVE-2014-1511" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-1511/">CVE-2014-1511</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1512</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1512" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1512" ref_url="https://www.suse.com/security/cve/CVE-2014-1512" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is occurring, as demonstrated by improper handling of BumpChunk objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1512/">CVE-2014-1512</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1513</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1513" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1513" ref_url="https://www.suse.com/security/cve/CVE-2014-1513" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based out-of-bounds write or read) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-1513/">CVE-2014-1513</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1514</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1514" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1514" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1514" ref_url="https://www.suse.com/security/cve/CVE-2014-1514" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by triggering incorrect use of the TypedArrayObject class.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-1514/">CVE-2014-1514</cve>
	<bugzilla href="https://bugzilla.suse.com/868603">SUSE bug 868603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1518</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1518" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1518" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1518" ref_url="https://www.suse.com/security/cve/CVE-2014-1518" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0638-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0602-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0640-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-24"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-1518/">CVE-2014-1518</cve>
	<bugzilla href="https://bugzilla.suse.com/875803">SUSE bug 875803</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1519</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1519" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1519" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1519" ref_url="https://www.suse.com/security/cve/CVE-2014-1519" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1519/">CVE-2014-1519</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1522</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1522" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1522" ref_url="https://www.suse.com/security/cve/CVE-2014-1522" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via crafted content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1522/">CVE-2014-1522</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1523</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1523" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1523" ref_url="https://www.suse.com/security/cve/CVE-2014-1523" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0638-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0602-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0640-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-1523/">CVE-2014-1523</cve>
	<bugzilla href="https://bugzilla.suse.com/875803">SUSE bug 875803</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1524</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1524" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1524" ref_url="https://www.suse.com/security/cve/CVE-2014-1524" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0638-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0602-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0640-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1524/">CVE-2014-1524</cve>
	<bugzilla href="https://bugzilla.suse.com/875803">SUSE bug 875803</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1525</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1525" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1525" ref_url="https://www.suse.com/security/cve/CVE-2014-1525" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) via a crafted VIDEO element in an HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1525/">CVE-2014-1525</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1526</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1526" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1526" ref_url="https://www.suse.com/security/cve/CVE-2014-1526" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that is visited in the debugger, leading to unwrapping operations and calls to DOM methods on the unwrapped objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1526/">CVE-2014-1526</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1528</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1528" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1528" ref_url="https://www.suse.com/security/cve/CVE-2014-1528" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1528/">CVE-2014-1528</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1529</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1529" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1529" ref_url="https://www.suse.com/security/cve/CVE-2014-1529" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0638-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0602-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0640-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component restrictions and execute arbitrary JavaScript code in a privileged context via a crafted web page for which Notification.permission is granted.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1529/">CVE-2014-1529</cve>
	<bugzilla href="https://bugzilla.suse.com/875803">SUSE bug 875803</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1530</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1530" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1530" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1530" ref_url="https://www.suse.com/security/cve/CVE-2014-1530" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0638-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0602-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0640-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting (XSS) attacks, via a crafted web site that performs history navigation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2014-1530/">CVE-2014-1530</cve>
	<bugzilla href="https://bugzilla.suse.com/875378">SUSE bug 875378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/875803">SUSE bug 875803</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1531</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1531" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1531" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1531" ref_url="https://www.suse.com/security/cve/CVE-2014-1531" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0638-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0602-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0640-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving an imgLoader object that is not properly handled during an image-resize operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-05"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-1531/">CVE-2014-1531</cve>
	<bugzilla href="https://bugzilla.suse.com/875803">SUSE bug 875803</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1532</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1532" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1532" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1532" ref_url="https://www.suse.com/security/cve/CVE-2014-1532" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0638-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0665-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0602-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0640-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-25"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-1532/">CVE-2014-1532</cve>
	<bugzilla href="https://bugzilla.suse.com/875803">SUSE bug 875803</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1533</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1533" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1533" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1533" ref_url="https://www.suse.com/security/cve/CVE-2014-1533" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0824-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1533/">CVE-2014-1533</cve>
	<bugzilla href="https://bugzilla.suse.com/881874">SUSE bug 881874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1534</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1534" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1534" ref_url="https://www.suse.com/security/cve/CVE-2014-1534" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0824-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-18"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1534/">CVE-2014-1534</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1536</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1536" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1536" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1536" ref_url="https://www.suse.com/security/cve/CVE-2014-1536" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0824-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1536/">CVE-2014-1536</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1537</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1537" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1537" ref_url="https://www.suse.com/security/cve/CVE-2014-1537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0824-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1537/">CVE-2014-1537</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1538</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1538" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1538" ref_url="https://www.suse.com/security/cve/CVE-2014-1538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0824-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1538/">CVE-2014-1538</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1539</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1539" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1539" ref_url="https://www.suse.com/security/cve/CVE-2014-1539" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1539/">CVE-2014-1539</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1540</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1540" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1540" ref_url="https://www.suse.com/security/cve/CVE-2014-1540" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1540/">CVE-2014-1540</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1541</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1541" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1541" ref_url="https://www.suse.com/security/cve/CVE-2014-1541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0824-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1541/">CVE-2014-1541</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1542</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1542" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1542" ref_url="https://www.suse.com/security/cve/CVE-2014-1542" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1542/">CVE-2014-1542</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1543</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1543" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1543" ref_url="https://www.suse.com/security/cve/CVE-2014-1543" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote attackers to execute arbitrary code by using non-contiguous axes with a (1) physical or (2) virtual Gamepad device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-08"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1543/">CVE-2014-1543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1544</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1544" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1544" ref_url="https://www.suse.com/security/cve/CVE-2014-1544" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0950-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-17"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1544/">CVE-2014-1544</cve>
	<bugzilla href="https://bugzilla.suse.com/887746">SUSE bug 887746</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1545</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1545" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1545" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1545" ref_url="https://www.suse.com/security/cve/CVE-2014-1545" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0824-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0824-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0819-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1545/">CVE-2014-1545</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481597" comment="mozilla-nspr-4.20-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481598" comment="mozilla-nspr-32bit-4.20-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481599" comment="mozilla-nspr-devel-4.20-3.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1547</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1547" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1547" ref_url="https://www.suse.com/security/cve/CVE-2014-1547" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0950-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1547/">CVE-2014-1547</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1548</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1548" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1548" ref_url="https://www.suse.com/security/cve/CVE-2014-1548" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0950-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-18"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1548/">CVE-2014-1548</cve>
	<bugzilla href="https://bugzilla.suse.com/887746">SUSE bug 887746</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1553</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1553" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1553" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1553" ref_url="https://www.suse.com/security/cve/CVE-2014-1553" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1553/">CVE-2014-1553</cve>
	<bugzilla href="https://bugzilla.suse.com/894370">SUSE bug 894370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1554</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1554" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1554" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1554" ref_url="https://www.suse.com/security/cve/CVE-2014-1554" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1345-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1554/">CVE-2014-1554</cve>
	<bugzilla href="https://bugzilla.suse.com/894370">SUSE bug 894370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1555</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1555" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1555" ref_url="https://www.suse.com/security/cve/CVE-2014-1555" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0950-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1555/">CVE-2014-1555</cve>
	<bugzilla href="https://bugzilla.suse.com/887746">SUSE bug 887746</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1556</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1556" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1556" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1556" ref_url="https://www.suse.com/security/cve/CVE-2014-1556" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0950-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1556/">CVE-2014-1556</cve>
	<bugzilla href="https://bugzilla.suse.com/887746">SUSE bug 887746</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141557" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1557</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1557" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1557" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1557" ref_url="https://www.suse.com/security/cve/CVE-2014-1557" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0950-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, does not properly handle the discarding of image data during function execution, which allows remote attackers to execute arbitrary code by triggering prolonged image scaling, as demonstrated by scaling of a high-quality image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1557/">CVE-2014-1557</cve>
	<bugzilla href="https://bugzilla.suse.com/887746">SUSE bug 887746</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1562</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1562" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1562" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1562" ref_url="https://www.suse.com/security/cve/CVE-2014-1562" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1120-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1120-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1562/">CVE-2014-1562</cve>
	<bugzilla href="https://bugzilla.suse.com/894370">SUSE bug 894370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1563</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1563" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1563" ref_url="https://www.suse.com/security/cve/CVE-2014-1563" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1563/">CVE-2014-1563</cve>
	<bugzilla href="https://bugzilla.suse.com/894370">SUSE bug 894370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1564</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1564" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1564" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1564" ref_url="https://www.suse.com/security/cve/CVE-2014-1564" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated with a malformed GIF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1564/">CVE-2014-1564</cve>
	<bugzilla href="https://bugzilla.suse.com/894370">SUSE bug 894370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1565</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1565" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1565" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1565" ref_url="https://www.suse.com/security/cve/CVE-2014-1565" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 does not properly create audio timelines, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted API calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1565/">CVE-2014-1565</cve>
	<bugzilla href="https://bugzilla.suse.com/894370">SUSE bug 894370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1566</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1566" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1566" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1566" ref_url="https://www.suse.com/security/cve/CVE-2014-1566" source="SUSE CVE"/>
    <description>
    Mozilla Firefox before 31.1 on Android does not properly restrict copying of local files onto the SD card during processing of file: URLs, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1515.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1566/">CVE-2014-1566</cve>
	<bugzilla href="https://bugzilla.suse.com/894370">SUSE bug 894370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1567</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1567" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1567" ref_url="https://www.suse.com/security/cve/CVE-2014-1567" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1120-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1120-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1567/">CVE-2014-1567</cve>
	<bugzilla href="https://bugzilla.suse.com/894370">SUSE bug 894370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1568</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1568" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1568" ref_url="https://www.suse.com/security/cve/CVE-2014-1568" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1220-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1220-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1220-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1220-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001078.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7015701" ref_url="https://www.suse.com/support/kb/doc/?id=7015701" source="SUSE-SU"/>
		<reference ref_id="TID7015705" ref_url="https://www.suse.com/support/kb/doc/?id=7015705" source="SUSE-SU"/>
		<reference ref_id="TID7015713" ref_url="https://www.suse.com/support/kb/doc/?id=7015713" source="SUSE-SU"/>
		<reference ref_id="TID7015715" ref_url="https://www.suse.com/support/kb/doc/?id=7015715" source="SUSE-SU"/>
		<reference ref_id="TID7015717" ref_url="https://www.suse.com/support/kb/doc/?id=7015717" source="SUSE-SU"/>
		<reference ref_id="TID7015720" ref_url="https://www.suse.com/support/kb/doc/?id=7015720" source="SUSE-SU"/>
		<reference ref_id="TID7016147" ref_url="https://www.suse.com/support/kb/doc/?id=7016147" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1224-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1232-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00039.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1568/">CVE-2014-1568</cve>
	<bugzilla href="https://bugzilla.suse.com/1107874">SUSE bug 1107874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/897890">SUSE bug 897890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898959">SUSE bug 898959</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1569</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1569" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1569" ref_url="https://www.suse.com/security/cve/CVE-2014-1569" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1569/">CVE-2014-1569</cve>
	<bugzilla href="https://bugzilla.suse.com/910647">SUSE bug 910647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1574</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1574" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1574" ref_url="https://www.suse.com/security/cve/CVE-2014-1574" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1385-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1343-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1345-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1574/">CVE-2014-1574</cve>
	<bugzilla href="https://bugzilla.suse.com/900941">SUSE bug 900941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1576</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1576" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1576" ref_url="https://www.suse.com/security/cve/CVE-2014-1576" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1385-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1343-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1345-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via Cascading Style Sheets (CSS) token sequences that trigger changes to capitalization style.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1576/">CVE-2014-1576</cve>
	<bugzilla href="https://bugzilla.suse.com/900941">SUSE bug 900941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1577</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1577" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1577" ref_url="https://www.suse.com/security/cve/CVE-2014-1577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1385-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1343-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1345-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via an invalid custom waveform that triggers a calculation of a negative frequency value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1577/">CVE-2014-1577</cve>
	<bugzilla href="https://bugzilla.suse.com/900941">SUSE bug 900941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1578</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1578" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1578" ref_url="https://www.suse.com/security/cve/CVE-2014-1578" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1385-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1343-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1345-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly execute arbitrary code via WebM frames with invalid tile sizes that are improperly handled in buffering operations during video playback.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1578/">CVE-2014-1578</cve>
	<bugzilla href="https://bugzilla.suse.com/900941">SUSE bug 900941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1581</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1581" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1581" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1581" ref_url="https://www.suse.com/security/cve/CVE-2014-1581" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1385-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1343-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1345-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1581/">CVE-2014-1581</cve>
	<bugzilla href="https://bugzilla.suse.com/900941">SUSE bug 900941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1585</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1585" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1585" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1585" ref_url="https://www.suse.com/security/cve/CVE-2014-1585" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1385-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1343-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1345-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not properly recognize Stop Sharing actions for videos in IFRAME elements, which allows remote attackers to obtain sensitive information from the local camera by maintaining a session after the user tries to discontinue streaming.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1585/">CVE-2014-1585</cve>
	<bugzilla href="https://bugzilla.suse.com/900941">SUSE bug 900941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1586</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1586" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1586" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1586" ref_url="https://www.suse.com/security/cve/CVE-2014-1586" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1385-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1458-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1343-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1345-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consider whether WebRTC video sharing is occurring, which allows remote attackers to obtain sensitive information from the local camera in certain IFRAME situations by maintaining a session after the user temporarily navigates away.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1586/">CVE-2014-1586</cve>
	<bugzilla href="https://bugzilla.suse.com/900941">SUSE bug 900941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1587</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1587" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1587" ref_url="https://www.suse.com/security/cve/CVE-2014-1587" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1654-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1587/">CVE-2014-1587</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1588</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1588" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1588" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1588" ref_url="https://www.suse.com/security/cve/CVE-2014-1588" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1588/">CVE-2014-1588</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1589</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1589" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1589" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1589" ref_url="https://www.suse.com/security/cve/CVE-2014-1589" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect primary namespace, which allows remote attackers to bypass intended access restrictions via an XBL binding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1589/">CVE-2014-1589</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1590</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1590" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1590" ref_url="https://www.suse.com/security/cve/CVE-2014-1590" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1654-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1590/">CVE-2014-1590</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1591</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1591" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1591" ref_url="https://www.suse.com/security/cve/CVE-2014-1591" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1591/">CVE-2014-1591</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1592</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1592" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1592" ref_url="https://www.suse.com/security/cve/CVE-2014-1592" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1654-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1592/">CVE-2014-1592</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1593</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1593" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1593" ref_url="https://www.suse.com/security/cve/CVE-2014-1593" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1654-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code via crafted media content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1593/">CVE-2014-1593</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1594</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1594" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1594" ref_url="https://www.suse.com/security/cve/CVE-2014-1594" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1654-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1656-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers to execute arbitrary code by leveraging an incorrect cast from the BasicThebesLayer data type to the BasicContainerLayer data type.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1594/">CVE-2014-1594</cve>
	<bugzilla href="https://bugzilla.suse.com/908009">SUSE bug 908009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1737</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1737" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1737" ref_url="https://www.suse.com/security/cve/CVE-2014-1737" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0667-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0683-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000880.html" source="SUSE-SU"/>
		<reference ref_id="TID7015062" ref_url="https://www.suse.com/support/kb/doc?id=7015062" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1737/">CVE-2014-1737</cve>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/875798">SUSE bug 875798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877345">SUSE bug 877345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1738</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1738" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1738" ref_url="https://www.suse.com/security/cve/CVE-2014-1738" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0667-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0683-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000859.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000860.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000880.html" source="SUSE-SU"/>
		<reference ref_id="TID7015062" ref_url="https://www.suse.com/support/kb/doc?id=7015062" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1738/">CVE-2014-1738</cve>
	<bugzilla href="https://bugzilla.suse.com/875798">SUSE bug 875798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877345">SUSE bug 877345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1829</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1829" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1829" ref_url="https://www.suse.com/security/cve/CVE-2014-1829" source="SUSE CVE"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1829/">CVE-2014-1829</cve>
	<bugzilla href="https://bugzilla.suse.com/897658">SUSE bug 897658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009770649" comment="python2-requests is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009770632" comment="python3-requests is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1830</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1830" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1830" ref_url="https://www.suse.com/security/cve/CVE-2014-1830" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0246-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1830/">CVE-2014-1830</cve>
	<bugzilla href="https://bugzilla.suse.com/897658">SUSE bug 897658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009770649" comment="python2-requests is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009770632" comment="python3-requests is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1912</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-1912" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1912" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-1912" ref_url="https://www.suse.com/security/cve/CVE-2014-1912" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-April/000803.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1006-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0380-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0498-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0518-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0597-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1734-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00111.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1912/">CVE-2014-1912</cve>
	<bugzilla href="https://bugzilla.suse.com/1049392">SUSE bug 1049392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049422">SUSE bug 1049422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/863741">SUSE bug 863741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882915">SUSE bug 882915</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912739">SUSE bug 912739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2039</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2039" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2039" ref_url="https://www.suse.com/security/cve/CVE-2014-2039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service (system crash) by executing a crafted instruction.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2039/">CVE-2014-2039</cve>
	<bugzilla href="https://bugzilla.suse.com/862796">SUSE bug 862796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/865307">SUSE bug 865307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2240</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2240" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2240" ref_url="https://www.suse.com/security/cve/CVE-2014-2240" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2240/">CVE-2014-2240</cve>
	<bugzilla href="https://bugzilla.suse.com/867620">SUSE bug 867620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916867">SUSE bug 916867</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2241</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2241" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2241" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2241" ref_url="https://www.suse.com/security/cve/CVE-2014-2241" source="SUSE CVE"/>
    <description>
    The (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in FreeType before 2.5.3 do not properly check if a subroutine exists, which allows remote attackers to cause a denial of service (assertion failure), as demonstrated by a crafted ttf file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2241/">CVE-2014-2241</cve>
	<bugzilla href="https://bugzilla.suse.com/867620">SUSE bug 867620</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2309</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2309" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2309" ref_url="https://www.suse.com/security/cve/CVE-2014-2309" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2309/">CVE-2014-2309</cve>
	<bugzilla href="https://bugzilla.suse.com/824295">SUSE bug 824295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/867531">SUSE bug 867531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2338</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2338" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2338" ref_url="https://www.suse.com/security/cve/CVE-2014-2338" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0697-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0700-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00066.html" source="SUSE-SU"/>
    <description>
    IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2338/">CVE-2014-2338</cve>
	<bugzilla href="https://bugzilla.suse.com/870572">SUSE bug 870572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2497</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2497" ref_url="https://www.suse.com/security/cve/CVE-2014-2497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0873-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0784-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0786-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00025.html" source="SUSE-SU"/>
    <description>
    The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2497/">CVE-2014-2497</cve>
	<bugzilla href="https://bugzilla.suse.com/868624">SUSE bug 868624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2524</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2524" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2524" ref_url="https://www.suse.com/security/cve/CVE-2014-2524" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html" source="SUSE-SU"/>
    <description>
    The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-2524/">CVE-2014-2524</cve>
	<bugzilla href="https://bugzilla.suse.com/868822">SUSE bug 868822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481018" comment="bash-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481019" comment="bash-devel-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481020" comment="bash-doc-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481021" comment="bash-lang-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481022" comment="libreadline7-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481023" comment="readline-devel-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481024" comment="readline-doc-7.0-9.7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487746" comment="crash-7.2.1-7.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487747" comment="crash-devel-7.2.1-7.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487748" comment="crash-kmp-default-7.2.1_k4.12.14_195-7.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2525</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2525" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2525" ref_url="https://www.suse.com/security/cve/CVE-2014-2525" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-March/000769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0953-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001412.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0500-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0319-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2525/">CVE-2014-2525</cve>
	<bugzilla href="https://bugzilla.suse.com/868944">SUSE bug 868944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911782">SUSE bug 911782</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487702" comment="perl-YAML-LibYAML-0.59-1.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480828" comment="libyaml-0-2-0.1.7-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480829" comment="libyaml-devel-0.1.7-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2532</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2532" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2532" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2532" ref_url="https://www.suse.com/security/cve/CVE-2014-2532" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000878.html" source="SUSE-SU"/>
    <description>
    sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2014-2532/">CVE-2014-2532</cve>
	<bugzilla href="https://bugzilla.suse.com/1074631">SUSE bug 1074631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/869101">SUSE bug 869101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890850">SUSE bug 890850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916239">SUSE bug 916239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996040">SUSE bug 996040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2583</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2583" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2583" ref_url="https://www.suse.com/security/cve/CVE-2014-2583" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000812.html" source="SUSE-SU"/>
    <description>
    Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1.8 allow local users to create arbitrary files or possibly bypass authentication via a .. (dot dot) in the (1) PAM_RUSER value to the get_ruser function or (2) PAM_TTY value to the check_tty function, which is used by the format_timestamp_name function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2583/">CVE-2014-2583</cve>
	<bugzilla href="https://bugzilla.suse.com/870433">SUSE bug 870433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487778" comment="pam-devel-32bit-1.3.0-6.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481612" comment="pam-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481613" comment="pam-32bit-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481614" comment="pam-devel-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481615" comment="pam-doc-1.3.0-6.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2667</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2667" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2667" ref_url="https://www.suse.com/security/cve/CVE-2014-2667" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0596-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0597-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    Race condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when exist_ok is set to true and multiple threads are used, might allow local users to bypass intended file permissions by leveraging a separate application vulnerability before the umask has been set to the expected value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2014-2667/">CVE-2014-2667</cve>
	<bugzilla href="https://bugzilla.suse.com/871152">SUSE bug 871152</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334160" comment="python3 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334160" comment="python3 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336374" comment="python3-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336375" comment="python3-dbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337943" comment="python3-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337944" comment="python3-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2672</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2672" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2672" ref_url="https://www.suse.com/security/cve/CVE-2014-2672" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000882.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00010.html" source="SUSE-SU"/>
    <description>
    Race condition in the ath_tx_aggr_sleep function in drivers/net/wireless/ath/ath9k/xmit.c in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via a large amount of network traffic that triggers certain list deletions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-17"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2672/">CVE-2014-2672</cve>
	<bugzilla href="https://bugzilla.suse.com/871148">SUSE bug 871148</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2678</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2678" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2678" ref_url="https://www.suse.com/security/cve/CVE-2014-2678" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00000.html" source="SUSE-SU"/>
    <description>
    The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2678/">CVE-2014-2678</cve>
	<bugzilla href="https://bugzilla.suse.com/871561">SUSE bug 871561</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2706</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2706" ref_url="https://www.suse.com/security/cve/CVE-2014-2706" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1246-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00056.html" source="SUSE-SU"/>
    <description>
    Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the WLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and tx.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2706/">CVE-2014-2706</cve>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871797">SUSE bug 871797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2707</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2707" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2707" ref_url="https://www.suse.com/security/cve/CVE-2014-2707" source="SUSE CVE"/>
    <description>
    cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to "System V interface scripts generated for queues."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2707/">CVE-2014-2707</cve>
	<bugzilla href="https://bugzilla.suse.com/871327">SUSE bug 871327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883543">SUSE bug 883543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/921753">SUSE bug 921753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937018">SUSE bug 937018</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2855</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2855" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2855" ref_url="https://www.suse.com/security/cve/CVE-2014-2855" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0595-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00006.html" source="SUSE-SU"/>
    <description>
    The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a user name which does not exist in the secrets file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2855/">CVE-2014-2855</cve>
	<bugzilla href="https://bugzilla.suse.com/873740">SUSE bug 873740</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480919" comment="rsync-3.1.3-2.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142892" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2892</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2892" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2892" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2892" ref_url="https://www.suse.com/security/cve/CVE-2014-2892" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0590-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00001.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execute arbitrary code via a long line in an MMS over HTTP (MMSH) server response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2892/">CVE-2014-2892</cve>
	<bugzilla href="https://bugzilla.suse.com/874723">SUSE bug 874723</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486461" comment="libmms-devel-0.6.4-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486462" comment="libmms0-0.6.4-1.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2907</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-2907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2907" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-2907" ref_url="https://www.suse.com/security/cve/CVE-2014-2907" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00022.html" source="SUSE-SU"/>
    <description>
    The srtp_add_address function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2907/">CVE-2014-2907</cve>
	<bugzilla href="https://bugzilla.suse.com/874693">SUSE bug 874693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/874760">SUSE bug 874760</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334893" comment="wireshark-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009653346" comment="wireshark-ui-qt is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338793" comment="libwireshark13 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338794" comment="libwiretap10 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338795" comment="libwsutil11 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333947" comment="wireshark is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3065</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3065" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3065" ref_url="https://www.suse.com/security/cve/CVE-2014-3065" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-3065/">CVE-2014-3065</cve>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930365">SUSE bug 930365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3122</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3122" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3122" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3122" ref_url="https://www.suse.com/security/cve/CVE-2014-3122" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00000.html" source="SUSE-SU"/>
    <description>
    The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel before 3.14.3 does not properly consider which pages must be locked, which allows local users to cause a denial of service (system crash) by triggering a memory-usage pattern that requires removal of page-table mappings.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3122/">CVE-2014-3122</cve>
	<bugzilla href="https://bugzilla.suse.com/824295">SUSE bug 824295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/876102">SUSE bug 876102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3144</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3144" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3144" ref_url="https://www.suse.com/security/cve/CVE-2014-3144" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1246-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00056.html" source="SUSE-SU"/>
    <description>
    The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr and __skb_get_nlattr_nest functions before the vulnerability was announced.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3144/">CVE-2014-3144</cve>
	<bugzilla href="https://bugzilla.suse.com/824295">SUSE bug 824295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877257">SUSE bug 877257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/889071">SUSE bug 889071</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3145</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3145" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3145" ref_url="https://www.suse.com/security/cve/CVE-2014-3145" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1246-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00056.html" source="SUSE-SU"/>
    <description>
    The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3145/">CVE-2014-3145</cve>
	<bugzilla href="https://bugzilla.suse.com/824295">SUSE bug 824295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/877257">SUSE bug 877257</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3153</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3153" ref_url="https://www.suse.com/security/cve/CVE-2014-3153" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0775-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0796-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0837-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0837-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0878-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.html" source="SUSE-SU"/>
    <description>
    The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3153/">CVE-2014-3153</cve>
	<bugzilla href="https://bugzilla.suse.com/877775">SUSE bug 877775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880892">SUSE bug 880892</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882228">SUSE bug 882228</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3158</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3158" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3158" ref_url="https://www.suse.com/security/cve/CVE-2014-3158" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00026.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "[corrupts] security-relevant variables."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3158/">CVE-2014-3158</cve>
	<bugzilla href="https://bugzilla.suse.com/891489">SUSE bug 891489</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486524" comment="ppp-2.4.7-3.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486525" comment="ppp-devel-2.4.7-3.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3181</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3181" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3181" ref_url="https://www.suse.com/security/cve/CVE-2014-3181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with an event.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3181/">CVE-2014-3181</cve>
	<bugzilla href="https://bugzilla.suse.com/896382">SUSE bug 896382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3184</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3184" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3184" ref_url="https://www.suse.com/security/cve/CVE-2014-3184" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a denial of service (out-of-bounds write) via a crafted device that provides a small report descriptor, related to (1) drivers/hid/hid-cherry.c, (2) drivers/hid/hid-kye.c, (3) drivers/hid/hid-lg.c, (4) drivers/hid/hid-monterey.c, (5) drivers/hid/hid-petalynx.c, and (6) drivers/hid/hid-sunplus.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3184/">CVE-2014-3184</cve>
	<bugzilla href="https://bugzilla.suse.com/896390">SUSE bug 896390</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3185</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3185" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3185" ref_url="https://www.suse.com/security/cve/CVE-2014-3185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel before 3.16.2 allow physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with a bulk response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3185/">CVE-2014-3185</cve>
	<bugzilla href="https://bugzilla.suse.com/896391">SUSE bug 896391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3186</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3186" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3186" ref_url="https://www.suse.com/security/cve/CVE-2014-3186" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in the Linux kernel through 3.16.3, as used in Android on Nexus 7 devices, allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that sends a large report.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3186/">CVE-2014-3186</cve>
	<bugzilla href="https://bugzilla.suse.com/896392">SUSE bug 896392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3214</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3214" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3214" ref_url="https://www.suse.com/security/cve/CVE-2014-3214" source="SUSE CVE"/>
    <description>
    The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a DNS query that triggers a response with unspecified attributes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3214/">CVE-2014-3214</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335113" comment="bind-chrootenv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335115" comment="bind-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335114" comment="bind-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335112" comment="bind-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634659" comment="libbind9-1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634660" comment="libdns1605 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634661" comment="libirs-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634662" comment="libirs1601 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634663" comment="libisc1606 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634664" comment="libisccc1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634665" comment="libisccfg1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634666" comment="libns1604 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634667" comment="python3-bind is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143230" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3230</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3230" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3230" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3230" ref_url="https://www.suse.com/security/cve/CVE-2014-3230" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0710-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00072.html" source="SUSE-SU"/>
    <description>
    The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the (1) HTTPS_CA_DIR or (2) HTTPS_CA_FILE environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-3230/">CVE-2014-3230</cve>
	<bugzilla href="https://bugzilla.suse.com/876862">SUSE bug 876862</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480874" comment="perl-LWP-Protocol-https-6.06-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009725567" comment="perl-LWP-Protocol-https is affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3421</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3421" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3421" ref_url="https://www.suse.com/security/cve/CVE-2014-3421" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00080.html" source="SUSE-SU"/>
    <description>
    lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3421/">CVE-2014-3421</cve>
	<bugzilla href="https://bugzilla.suse.com/876847">SUSE bug 876847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486596" comment="emacs-x11-25.3-3.3.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481111" comment="emacs-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481112" comment="emacs-el-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481113" comment="emacs-info-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481114" comment="emacs-nox-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481115" comment="etags-25.3-3.3.18 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3422</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3422" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3422" ref_url="https://www.suse.com/security/cve/CVE-2014-3422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00080.html" source="SUSE-SU"/>
    <description>
    lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3422/">CVE-2014-3422</cve>
	<bugzilla href="https://bugzilla.suse.com/876847">SUSE bug 876847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486596" comment="emacs-x11-25.3-3.3.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481111" comment="emacs-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481112" comment="emacs-el-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481113" comment="emacs-info-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481114" comment="emacs-nox-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481115" comment="etags-25.3-3.3.18 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3423</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3423" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3423" ref_url="https://www.suse.com/security/cve/CVE-2014-3423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00080.html" source="SUSE-SU"/>
    <description>
    lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3423/">CVE-2014-3423</cve>
	<bugzilla href="https://bugzilla.suse.com/876847">SUSE bug 876847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486596" comment="emacs-x11-25.3-3.3.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481111" comment="emacs-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481112" comment="emacs-el-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481113" comment="emacs-info-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481114" comment="emacs-nox-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481115" comment="etags-25.3-3.3.18 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3424</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3424" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3424" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3424" ref_url="https://www.suse.com/security/cve/CVE-2014-3424" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00080.html" source="SUSE-SU"/>
    <description>
    lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp.##### temporary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3424/">CVE-2014-3424</cve>
	<bugzilla href="https://bugzilla.suse.com/876847">SUSE bug 876847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486596" comment="emacs-x11-25.3-3.3.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481111" comment="emacs-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481112" comment="emacs-el-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481113" comment="emacs-info-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481114" comment="emacs-nox-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481115" comment="etags-25.3-3.3.18 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3461</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3461" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3461" ref_url="https://www.suse.com/security/cve/CVE-2014-3461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-October/001032.html" source="SUSE-SU"/>
    <description>
    hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3461/">CVE-2014-3461</cve>
	<bugzilla href="https://bugzilla.suse.com/878541">SUSE bug 878541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3470</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3470" ref_url="https://www.suse.com/security/cve/CVE-2014-3470" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0761-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/001012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0743-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="TID7008708" ref_url="https://www.suse.com/support/kb/doc/?id=7008708" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7015162" ref_url="https://www.suse.com/support/kb/doc?id=7015162" source="SUSE-SU"/>
		<reference ref_id="TID7015189" ref_url="https://www.suse.com/support/kb/doc?id=7015189" source="SUSE-SU"/>
		<reference ref_id="TID7015264" ref_url="https://www.suse.com/support/kb/doc?id=7015264" source="SUSE-SU"/>
		<reference ref_id="TID7015300" ref_url="https://www.suse.com/support/kb/doc?id=7015300" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0765-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3470/">CVE-2014-3470</cve>
	<bugzilla href="https://bugzilla.suse.com/880891">SUSE bug 880891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883126">SUSE bug 883126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885777">SUSE bug 885777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915913">SUSE bug 915913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3490</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3490" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3490" ref_url="https://www.suse.com/security/cve/CVE-2014-3490" source="SUSE CVE"/>
    <description>
    RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-23"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3490/">CVE-2014-3490</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009348226" comment="java-10-openjdk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333949" comment="java-1_8_0-openjdk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009348226" comment="java-10-openjdk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009626049" comment="java-10-openjdk-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009626050" comment="java-10-openjdk-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009626051" comment="java-10-openjdk-headless is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333949" comment="java-1_8_0-openjdk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334918" comment="java-1_8_0-openjdk-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334919" comment="java-1_8_0-openjdk-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334917" comment="java-1_8_0-openjdk-headless is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3499</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3499" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3499" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3499" ref_url="https://www.suse.com/security/cve/CVE-2014-3499" source="SUSE CVE"/>
    <description>
    Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3499/">CVE-2014-3499</cve>
	<bugzilla href="https://bugzilla.suse.com/885209">SUSE bug 885209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3504</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3504" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3504" ref_url="https://www.suse.com/security/cve/CVE-2014-3504" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1059-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html" source="SUSE-SU"/>
    <description>
    The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7 does not properly handle a NUL byte in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3504/">CVE-2014-3504</cve>
	<bugzilla href="https://bugzilla.suse.com/890510">SUSE bug 890510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890511">SUSE bug 890511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480712" comment="libserf-1-1-1.3.9-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480713" comment="libserf-devel-1.3.9-2.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3505</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3505" ref_url="https://www.suse.com/security/cve/CVE-2014-3505" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/001012.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1052-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (application crash) via crafted DTLS packets that trigger an error condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3505/">CVE-2014-3505</cve>
	<bugzilla href="https://bugzilla.suse.com/890759">SUSE bug 890759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890764">SUSE bug 890764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890767">SUSE bug 890767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3506</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3506" ref_url="https://www.suse.com/security/cve/CVE-2014-3506" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/001012.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1052-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via crafted DTLS handshake messages that trigger memory allocations corresponding to large length values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3506/">CVE-2014-3506</cve>
	<bugzilla href="https://bugzilla.suse.com/890759">SUSE bug 890759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890764">SUSE bug 890764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890768">SUSE bug 890768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3507</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3507" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3507" ref_url="https://www.suse.com/security/cve/CVE-2014-3507" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/001012.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1052-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of the return value of a certain insert function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3507/">CVE-2014-3507</cve>
	<bugzilla href="https://bugzilla.suse.com/890759">SUSE bug 890759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890764">SUSE bug 890764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890769">SUSE bug 890769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3508</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3508" ref_url="https://www.suse.com/security/cve/CVE-2014-3508" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/001012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001094.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7014420" ref_url="https://www.suse.com/support/kb/doc/?id=7014420" source="SUSE-SU"/>
		<reference ref_id="TID7016328" ref_url="https://www.suse.com/support/kb/doc/?id=7016328" source="SUSE-SU"/>
		<reference ref_id="TID7016875" ref_url="https://www.suse.com/support/kb/doc/?id=7016875" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1052-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of '\0' characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3508/">CVE-2014-3508</cve>
	<bugzilla href="https://bugzilla.suse.com/890759">SUSE bug 890759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890764">SUSE bug 890764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950708">SUSE bug 950708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3509</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3509" ref_url="https://www.suse.com/security/cve/CVE-2014-3509" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000966.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1052-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumption are used, allows remote SSL servers to cause a denial of service (memory overwrite and client application crash) or possibly have unspecified other impact by sending Elliptic Curve (EC) Supported Point Formats Extension data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3509/">CVE-2014-3509</cve>
	<bugzilla href="https://bugzilla.suse.com/890759">SUSE bug 890759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890766">SUSE bug 890766</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3510</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3510" ref_url="https://www.suse.com/security/cve/CVE-2014-3510" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/001012.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1052-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake message in conjunction with a (1) anonymous DH or (2) anonymous ECDH ciphersuite.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3510/">CVE-2014-3510</cve>
	<bugzilla href="https://bugzilla.suse.com/890759">SUSE bug 890759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890764">SUSE bug 890764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890770">SUSE bug 890770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3511</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3511" ref_url="https://www.suse.com/security/cve/CVE-2014-3511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000966.html" source="SUSE-SU"/>
		<reference ref_id="TID7017332" ref_url="https://www.suse.com/support/kb/doc/?id=7017332" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1052-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html" source="SUSE-SU"/>
    <description>
    The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a "protocol downgrade" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3511/">CVE-2014-3511</cve>
	<bugzilla href="https://bugzilla.suse.com/890759">SUSE bug 890759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890771">SUSE bug 890771</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3512</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3512" ref_url="https://www.suse.com/security/cve/CVE-2014-3512" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000966.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1052-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3512/">CVE-2014-3512</cve>
	<bugzilla href="https://bugzilla.suse.com/890759">SUSE bug 890759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890772">SUSE bug 890772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3513</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3513" ref_url="https://www.suse.com/security/cve/CVE-2014-3513" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1357-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001084.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00059.html" source="SUSE-SU"/>
    <description>
    Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-3513/">CVE-2014-3513</cve>
	<bugzilla href="https://bugzilla.suse.com/901277">SUSE bug 901277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3522</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3522" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3522" ref_url="https://www.suse.com/security/cve/CVE-2014-3522" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1059-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html" source="SUSE-SU"/>
    <description>
    The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3522/">CVE-2014-3522</cve>
	<bugzilla href="https://bugzilla.suse.com/890511">SUSE bug 890511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3523</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3523" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3523" ref_url="https://www.suse.com/security/cve/CVE-2014-3523" source="SUSE CVE"/>
    <description>
    Memory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the Apache HTTP Server 2.4.x before 2.4.10 on Windows, when the default AcceptFilter is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3523/">CVE-2014-3523</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3528</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3528" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3528" ref_url="https://www.suse.com/security/cve/CVE-2014-3528" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1071-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000974.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1071-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000978.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1059-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html" source="SUSE-SU"/>
    <description>
    Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3528/">CVE-2014-3528</cve>
	<bugzilla href="https://bugzilla.suse.com/889849">SUSE bug 889849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890511">SUSE bug 890511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3537</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3537" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3537" ref_url="https://www.suse.com/security/cve/CVE-2014-3537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000963.html" source="SUSE-SU"/>
    <description>
    The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3537/">CVE-2014-3537</cve>
	<bugzilla href="https://bugzilla.suse.com/887240">SUSE bug 887240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487749" comment="cups-ddk-2.2.7-3.11.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481064" comment="cups-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481065" comment="cups-client-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481066" comment="cups-config-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481067" comment="cups-devel-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481068" comment="libcups2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481069" comment="libcups2-32bit-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481070" comment="libcupscgi1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481071" comment="libcupsimage2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481072" comment="libcupsmime1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481073" comment="libcupsppdc1-2.2.7-3.11.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3564</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3564" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3564" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3564" ref_url="https://www.suse.com/security/cve/CVE-2014-3564" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000977.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1039-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00026.html" source="SUSE-SU"/>
    <description>
    Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3564/">CVE-2014-3564</cve>
	<bugzilla href="https://bugzilla.suse.com/890123">SUSE bug 890123</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481172" comment="gpgme-1.10.0-4.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481173" comment="libgpgme-devel-1.10.0-4.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481174" comment="libgpgme11-1.10.0-4.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481175" comment="libgpgmepp-devel-1.10.0-4.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481176" comment="libgpgmepp6-1.10.0-4.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481177" comment="libqgpgme-devel-1.10.0-4.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481178" comment="libqgpgme7-1.10.0-4.3.4 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3566</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3566" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3566" ref_url="https://www.suse.com/security/cve/CVE-2014-3566" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1357-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1387-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1409-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1457-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002277.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2396-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002292.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7010166" ref_url="https://www.suse.com/support/kb/doc/?id=7010166" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7014420" ref_url="https://www.suse.com/support/kb/doc/?id=7014420" source="SUSE-SU"/>
		<reference ref_id="TID7015773" ref_url="https://www.suse.com/support/kb/doc?id=7015773" source="SUSE-SU"/>
		<reference ref_id="TID7015777" ref_url="https://www.suse.com/support/kb/doc/?id=7015777" source="SUSE-SU"/>
		<reference ref_id="TID7015785" ref_url="https://www.suse.com/support/kb/doc/?id=7015785" source="SUSE-SU"/>
		<reference ref_id="TID7015793" ref_url="https://www.suse.com/support/kb/doc/?id=7015793" source="SUSE-SU"/>
		<reference ref_id="TID7015804" ref_url="https://www.suse.com/support/kb/doc/?id=7015804" source="SUSE-SU"/>
		<reference ref_id="TID7015805" ref_url="https://www.suse.com/support/kb/doc/?id=7015805" source="SUSE-SU"/>
		<reference ref_id="TID7015809" ref_url="https://www.suse.com/support/kb/doc/?id=7015809" source="SUSE-SU"/>
		<reference ref_id="TID7015826" ref_url="https://www.suse.com/support/kb/doc/?id=7015826" source="SUSE-SU"/>
		<reference ref_id="TID7015854" ref_url="https://www.suse.com/support/kb/doc/?id=7015854" source="SUSE-SU"/>
		<reference ref_id="TID7015987" ref_url="https://www.suse.com/support/kb/doc/?id=7015987" source="SUSE-SU"/>
		<reference ref_id="TID7016067" ref_url="https://www.suse.com/support/kb/doc/?id=7016067" source="SUSE-SU"/>
		<reference ref_id="TID7016068" ref_url="https://www.suse.com/support/kb/doc/?id=7016068" source="SUSE-SU"/>
		<reference ref_id="TID7016144" ref_url="https://www.suse.com/support/kb/doc/?id=7016144" source="SUSE-SU"/>
		<reference ref_id="TID7016205" ref_url="https://www.suse.com/support/kb/doc/?id=7016205" source="SUSE-SU"/>
		<reference ref_id="TID7016299" ref_url="https://www.suse.com/support/kb/doc?id=7016299" source="SUSE-SU"/>
		<reference ref_id="TID7016328" ref_url="https://www.suse.com/support/kb/doc/?id=7016328" source="SUSE-SU"/>
		<reference ref_id="TID7016351" ref_url="https://www.suse.com/support/kb/doc/?id=7016351" source="SUSE-SU"/>
		<reference ref_id="TID7016875" ref_url="https://www.suse.com/support/kb/doc/?id=7016875" source="SUSE-SU"/>
		<reference ref_id="TID7017332" ref_url="https://www.suse.com/support/kb/doc/?id=7017332" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021433" ref_url="https://www.suse.com/support/kb/doc/?id=7021433" source="SUSE-SU"/>
		<reference ref_id="TID7021975" ref_url="https://www.suse.com/support/kb/doc/?id=7021975" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1384-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1395-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0190-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2877-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0980-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="3.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-3566/">CVE-2014-3566</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031023">SUSE bug 1031023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901223">SUSE bug 901223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901254">SUSE bug 901254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901277">SUSE bug 901277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901748">SUSE bug 901748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901757">SUSE bug 901757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901759">SUSE bug 901759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901889">SUSE bug 901889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901968">SUSE bug 901968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/902229">SUSE bug 902229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/902233">SUSE bug 902233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/902476">SUSE bug 902476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903405">SUSE bug 903405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903684">SUSE bug 903684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914041">SUSE bug 914041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994144">SUSE bug 994144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488115" comment="apache2-mod_nss-1.0.17-1.28 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3567</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3567" ref_url="https://www.suse.com/security/cve/CVE-2014-3567" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1357-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1387-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001084.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3567/">CVE-2014-3567</cve>
	<bugzilla href="https://bugzilla.suse.com/877506">SUSE bug 877506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901277">SUSE bug 901277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3568</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3568" ref_url="https://www.suse.com/security/cve/CVE-2014-3568" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1357-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1361-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1387-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1409-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001094.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3568/">CVE-2014-3568</cve>
	<bugzilla href="https://bugzilla.suse.com/901277">SUSE bug 901277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911399">SUSE bug 911399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3569</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3569" ref_url="https://www.suse.com/security/cve/CVE-2014-3569" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="TID7016027" ref_url="https://www.suse.com/support/kb/doc/?id=7016027" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.  NOTE: this issue became relevant after the CVE-2014-3568 fix.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3569/">CVE-2014-3569</cve>
	<bugzilla href="https://bugzilla.suse.com/911399">SUSE bug 911399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3570</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3570" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3570" ref_url="https://www.suse.com/security/cve/CVE-2014-3570" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3570/">CVE-2014-3570</cve>
	<bugzilla href="https://bugzilla.suse.com/912296">SUSE bug 912296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915848">SUSE bug 915848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944456">SUSE bug 944456</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3571</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3571" ref_url="https://www.suse.com/security/cve/CVE-2014-3571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3571/">CVE-2014-3571</cve>
	<bugzilla href="https://bugzilla.suse.com/912294">SUSE bug 912294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915848">SUSE bug 915848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3572</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3572" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3572" ref_url="https://www.suse.com/security/cve/CVE-2014-3572" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3572/">CVE-2014-3572</cve>
	<bugzilla href="https://bugzilla.suse.com/912015">SUSE bug 912015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915848">SUSE bug 915848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3577</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3577" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3577" ref_url="https://www.suse.com/security/cve/CVE-2014-3577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007689.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007690.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007692.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html" source="SUSE-SU"/>
    <description>
    org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2014-3577/">CVE-2014-3577</cve>
	<bugzilla href="https://bugzilla.suse.com/1178171">SUSE bug 1178171</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333950" comment="apache-commons-httpclient is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492775" comment="apache-commons-httpclient-3.1-4.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143580" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3580</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3580" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3580" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3580" ref_url="https://www.suse.com/security/cve/CVE-2014-3580" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0155-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1725-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00107.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3580/">CVE-2014-3580</cve>
	<bugzilla href="https://bugzilla.suse.com/909935">SUSE bug 909935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910376">SUSE bug 910376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3581</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3581" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3581" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3581" ref_url="https://www.suse.com/security/cve/CVE-2014-3581" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001415.html" source="SUSE-SU"/>
    <description>
    The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3581/">CVE-2014-3581</cve>
	<bugzilla href="https://bugzilla.suse.com/899836">SUSE bug 899836</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3583</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3583" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3583" ref_url="https://www.suse.com/security/cve/CVE-2014-3583" source="SUSE CVE"/>
    <description>
    The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long response headers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3583/">CVE-2014-3583</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3591</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3591" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3591" ref_url="https://www.suse.com/security/cve/CVE-2014-3591" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001473.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1626-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001602.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00005.html" source="SUSE-SU"/>
    <description>
    Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-3591/">CVE-2014-3591</cve>
	<bugzilla href="https://bugzilla.suse.com/920057">SUSE bug 920057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/949135">SUSE bug 949135</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481367" comment="libgcrypt-devel-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481368" comment="libgcrypt20-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481369" comment="libgcrypt20-32bit-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481370" comment="libgcrypt20-hmac-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481371" comment="libgcrypt20-hmac-32bit-1.8.2-6.7 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3596</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3596" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3596" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3596" ref_url="https://www.suse.com/security/cve/CVE-2014-3596" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005514.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1373-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005517.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00022.html" source="SUSE-SU"/>
    <description>
    The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5784.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2014-3596/">CVE-2014-3596</cve>
	<bugzilla href="https://bugzilla.suse.com/1134598">SUSE bug 1134598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334475" comment="axis is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490144" comment="axis-1.4-5.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3601</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3601" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3601" ref_url="https://www.suse.com/security/cve/CVE-2014-3601" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to (1) cause a denial of service (host OS memory corruption) or possibly have unspecified other impact by triggering a large gfn value or (2) cause a denial of service (host OS memory consumption) by triggering a small gfn value that leads to permanently pinned pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3601/">CVE-2014-3601</cve>
	<bugzilla href="https://bugzilla.suse.com/892782">SUSE bug 892782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/902675">SUSE bug 902675</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3610</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3610" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3610" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3610" ref_url="https://www.suse.com/security/cve/CVE-2014-3610" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows guest OS users to cause a denial of service (host OS crash) by leveraging guest OS privileges, related to the wrmsr_interception function in arch/x86/kvm/svm.c and the handle_wrmsr function in arch/x86/kvm/vmx.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-3610/">CVE-2014-3610</cve>
	<bugzilla href="https://bugzilla.suse.com/899192">SUSE bug 899192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3613</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3613" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3613" ref_url="https://www.suse.com/security/cve/CVE-2014-3613" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001199.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00024.html" source="SUSE-SU"/>
    <description>
    cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3613/">CVE-2014-3613</cve>
	<bugzilla href="https://bugzilla.suse.com/894575">SUSE bug 894575</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3618</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3618" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3618" ref_url="https://www.suse.com/security/cve/CVE-2014-3618" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1114-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3618/">CVE-2014-3618</cve>
	<bugzilla href="https://bugzilla.suse.com/1068648">SUSE bug 1068648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/894999">SUSE bug 894999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898303">SUSE bug 898303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480880" comment="procmail-3.22-2.34 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3620</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3620" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3620" ref_url="https://www.suse.com/security/cve/CVE-2014-3620" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00024.html" source="SUSE-SU"/>
    <description>
    cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3620/">CVE-2014-3620</cve>
	<bugzilla href="https://bugzilla.suse.com/1199221">SUSE bug 1199221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/894575">SUSE bug 894575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/895991">SUSE bug 895991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3631</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3631" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3631" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3631" ref_url="https://www.suse.com/security/cve/CVE-2014-3631" source="SUSE CVE"/>
    <description>
    The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.16.3 does not properly implement garbage collection, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via multiple "keyctl newring" operations followed by a "keyctl timeout" operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3631/">CVE-2014-3631</cve>
	<bugzilla href="https://bugzilla.suse.com/896262">SUSE bug 896262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3634</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3634" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3634" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3634" ref_url="https://www.suse.com/security/cve/CVE-2014-3634" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1294-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1297-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1298-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00021.html" source="SUSE-SU"/>
    <description>
    rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priority (PRI) value that triggers an out-of-bounds array access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3634/">CVE-2014-3634</cve>
	<bugzilla href="https://bugzilla.suse.com/897262">SUSE bug 897262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/899756">SUSE bug 899756</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481653" comment="rsyslog-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480939" comment="syslog-service-2.0-2.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488431" comment="rsyslog-module-gssapi-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488432" comment="rsyslog-module-gtls-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488433" comment="rsyslog-module-mysql-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488434" comment="rsyslog-module-pgsql-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488435" comment="rsyslog-module-relp-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488436" comment="rsyslog-module-snmp-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488437" comment="rsyslog-module-udpspoof-8.33.1-3.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3636</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3636" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3636" ref_url="https://www.suse.com/security/cve/CVE-2014-3636" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001137.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1228-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html" source="SUSE-SU"/>
    <description>
    D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3636/">CVE-2014-3636</cve>
	<bugzilla href="https://bugzilla.suse.com/896453">SUSE bug 896453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904017">SUSE bug 904017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481093" comment="dbus-1-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481094" comment="dbus-1-devel-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481095" comment="dbus-1-x11-1.12.2-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481096" comment="libdbus-1-3-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481097" comment="libdbus-1-3-32bit-1.12.2-6.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3637</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3637" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3637" ref_url="https://www.suse.com/security/cve/CVE-2014-3637" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1228-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html" source="SUSE-SU"/>
    <description>
    D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3637/">CVE-2014-3637</cve>
	<bugzilla href="https://bugzilla.suse.com/896453">SUSE bug 896453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481093" comment="dbus-1-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481094" comment="dbus-1-devel-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481095" comment="dbus-1-x11-1.12.2-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481096" comment="libdbus-1-3-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481097" comment="libdbus-1-3-32bit-1.12.2-6.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3639</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3639" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3639" ref_url="https://www.suse.com/security/cve/CVE-2014-3639" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1228-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html" source="SUSE-SU"/>
    <description>
    The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3639/">CVE-2014-3639</cve>
	<bugzilla href="https://bugzilla.suse.com/896453">SUSE bug 896453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903055">SUSE bug 903055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903057">SUSE bug 903057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481093" comment="dbus-1-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481094" comment="dbus-1-devel-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481095" comment="dbus-1-x11-1.12.2-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481096" comment="libdbus-1-3-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481097" comment="libdbus-1-3-32bit-1.12.2-6.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3640</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3640" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3640" ref_url="https://www.suse.com/security/cve/CVE-2014-3640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
    <description>
    The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<cve href="https://www.suse.com/security/cve/CVE-2014-3640/">CVE-2014-3640</cve>
	<bugzilla href="https://bugzilla.suse.com/897654">SUSE bug 897654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965112">SUSE bug 965112</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3646</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3646" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3646" ref_url="https://www.suse.com/security/cve/CVE-2014-3646" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-3646/">CVE-2014-3646</cve>
	<bugzilla href="https://bugzilla.suse.com/899192">SUSE bug 899192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3660</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3660" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3660" ref_url="https://www.suse.com/security/cve/CVE-2014-3660" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001142.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1330-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
    <description>
    parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3660/">CVE-2014-3660</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901546">SUSE bug 901546</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3672</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3672" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3672" ref_url="https://www.suse.com/security/cve/CVE-2014-3672" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-3672/">CVE-2014-3672</cve>
	<bugzilla href="https://bugzilla.suse.com/981264">SUSE bug 981264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3673</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3673" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3673" ref_url="https://www.suse.com/security/cve/CVE-2014-3673" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-3673/">CVE-2014-3673</cve>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/902346">SUSE bug 902346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/902349">SUSE bug 902349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904899">SUSE bug 904899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3675</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3675" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3675" ref_url="https://www.suse.com/security/cve/CVE-2014-3675" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00011.html" source="SUSE-SU"/>
    <description>
    Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3675/">CVE-2014-3675</cve>
	<bugzilla href="https://bugzilla.suse.com/889332">SUSE bug 889332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481655" comment="shim-15+git47-1.5 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3676</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3676" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3676" ref_url="https://www.suse.com/security/cve/CVE-2014-3676" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00011.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3676/">CVE-2014-3676</cve>
	<bugzilla href="https://bugzilla.suse.com/889332">SUSE bug 889332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481655" comment="shim-15+git47-1.5 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3677</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3677" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3677" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3677" ref_url="https://www.suse.com/security/cve/CVE-2014-3677" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00011.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3677/">CVE-2014-3677</cve>
	<bugzilla href="https://bugzilla.suse.com/889332">SUSE bug 889332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481655" comment="shim-15+git47-1.5 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3683</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3683" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3683" ref_url="https://www.suse.com/security/cve/CVE-2014-3683" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1294-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1438-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1297-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1298-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00021.html" source="SUSE-SU"/>
    <description>
    Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash) via a large priority (PRI) value.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3634.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3683/">CVE-2014-3683</cve>
	<bugzilla href="https://bugzilla.suse.com/897262">SUSE bug 897262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/899756">SUSE bug 899756</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481653" comment="rsyslog-8.33.1-3.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488431" comment="rsyslog-module-gssapi-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488432" comment="rsyslog-module-gtls-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488433" comment="rsyslog-module-mysql-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488434" comment="rsyslog-module-pgsql-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488435" comment="rsyslog-module-relp-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488436" comment="rsyslog-module-snmp-8.33.1-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488437" comment="rsyslog-module-udpspoof-8.33.1-3.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3686</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3686" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3686" ref_url="https://www.suse.com/security/cve/CVE-2014-3686" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001423.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1313-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1314-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00028.html" source="SUSE-SU"/>
    <description>
    wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3686/">CVE-2014-3686</cve>
	<bugzilla href="https://bugzilla.suse.com/1063667">SUSE bug 1063667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/900611">SUSE bug 900611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915323">SUSE bug 915323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481672" comment="wpa_supplicant-2.6-4.11.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3687</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3687" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3687" ref_url="https://www.suse.com/security/cve/CVE-2014-3687" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0178-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-3687/">CVE-2014-3687</cve>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/902349">SUSE bug 902349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904899">SUSE bug 904899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909208">SUSE bug 909208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3688</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3688" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3688" ref_url="https://www.suse.com/security/cve/CVE-2014-3688" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2062-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2177-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20182177-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated by ASCONF probes, related to net/sctp/inqueue.c and net/sctp/sm_statefuns.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3688/">CVE-2014-3688</cve>
	<bugzilla href="https://bugzilla.suse.com/902351">SUSE bug 902351</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3690</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3690" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3690" ref_url="https://www.suse.com/security/cve/CVE-2014-3690" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0178-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-3690/">CVE-2014-3690</cve>
	<bugzilla href="https://bugzilla.suse.com/902232">SUSE bug 902232</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3693</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3693" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3693" ref_url="https://www.suse.com/security/cve/CVE-2014-3693" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1412-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1443-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3693/">CVE-2014-3693</cve>
	<bugzilla href="https://bugzilla.suse.com/900214">SUSE bug 900214</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3694</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3694" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3694" ref_url="https://www.suse.com/security/cve/CVE-2014-3694" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html" source="SUSE-SU"/>
    <description>
    The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the Basic Constraints extension during verification of X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3694/">CVE-2014-3694</cve>
	<bugzilla href="https://bugzilla.suse.com/902495">SUSE bug 902495</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3695</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3695" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3695" ref_url="https://www.suse.com/security/cve/CVE-2014-3695" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0925-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00013.html" source="SUSE-SU"/>
    <description>
    markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a large length value in an emoticon response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3695/">CVE-2014-3695</cve>
	<bugzilla href="https://bugzilla.suse.com/902409">SUSE bug 902409</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3696</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3696" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3696" ref_url="https://www.suse.com/security/cve/CVE-2014-3696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0925-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00013.html" source="SUSE-SU"/>
    <description>
    nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a crafted server message that triggers a large memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3696/">CVE-2014-3696</cve>
	<bugzilla href="https://bugzilla.suse.com/902410">SUSE bug 902410</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3697</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3697" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3697" ref_url="https://www.suse.com/security/cve/CVE-2014-3697" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html" source="SUSE-SU"/>
    <description>
    Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a drive name in a tar archive of a smiley theme.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3697/">CVE-2014-3697</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3698</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3698" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3698" ref_url="https://www.suse.com/security/cve/CVE-2014-3698" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1615-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1623-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0925-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to obtain sensitive information from process memory via a crafted XMPP message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3698/">CVE-2014-3698</cve>
	<bugzilla href="https://bugzilla.suse.com/902408">SUSE bug 902408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3710</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3710" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3710" ref_url="https://www.suse.com/security/cve/CVE-2014-3710" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1516-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00113.html" source="SUSE-SU"/>
    <description>
    The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3710/">CVE-2014-3710</cve>
	<bugzilla href="https://bugzilla.suse.com/902367">SUSE bug 902367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910252">SUSE bug 910252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481116" comment="file-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481117" comment="file-devel-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481118" comment="file-magic-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481119" comment="libmagic1-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481120" comment="libmagic1-32bit-5.32-7.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3775</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3775" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3775" ref_url="https://www.suse.com/security/cve/CVE-2014-3775" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0742-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00004.html" source="SUSE-SU"/>
    <description>
    libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3775/">CVE-2014-3775</cve>
	<bugzilla href="https://bugzilla.suse.com/878540">SUSE bug 878540</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488922" comment="libgadu-devel-1.12.2-1.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488923" comment="libgadu3-1.12.2-1.44 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3859</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3859" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3859" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3859" ref_url="https://www.suse.com/security/cve/CVE-2014-3859" source="SUSE CVE"/>
    <description>
    libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted packet, as demonstrated by an attack against named, dig, or delv.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-06"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3859/">CVE-2014-3859</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335113" comment="bind-chrootenv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335115" comment="bind-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335114" comment="bind-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335112" comment="bind-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634659" comment="libbind9-1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634660" comment="libdns1605 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634661" comment="libirs-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634662" comment="libirs1601 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634663" comment="libisc1606 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634664" comment="libisccc1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634665" comment="libisccfg1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634666" comment="libns1604 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634667" comment="python3-bind is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143917" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3917</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3917" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3917" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3917" ref_url="https://www.suse.com/security/cve/CVE-2014-3917" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1246-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00056.html" source="SUSE-SU"/>
    <description>
    kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service (OOPS) via a large value of a syscall number.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3917/">CVE-2014-3917</cve>
	<bugzilla href="https://bugzilla.suse.com/880484">SUSE bug 880484</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3970</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-3970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3970" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-3970" ref_url="https://www.suse.com/security/cve/CVE-2014-3970" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000959.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0946-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00036.html" source="SUSE-SU"/>
    <description>
    The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3970/">CVE-2014-3970</cve>
	<bugzilla href="https://bugzilla.suse.com/881524">SUSE bug 881524</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480693" comment="libpulse-devel-11.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480694" comment="libpulse-mainloop-glib0-11.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480695" comment="libpulse0-11.1-4.31 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486526" comment="pulseaudio-11.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486527" comment="pulseaudio-bash-completion-11.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486528" comment="pulseaudio-esound-compat-11.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486529" comment="pulseaudio-gdm-hooks-11.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486530" comment="pulseaudio-lang-11.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486531" comment="pulseaudio-module-gconf-11.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486532" comment="pulseaudio-module-x11-11.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486533" comment="pulseaudio-module-zeroconf-11.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486534" comment="pulseaudio-utils-11.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486535" comment="pulseaudio-zsh-completion-11.1-4.31 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489044" comment="pulseaudio-module-bluetooth-11.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489045" comment="pulseaudio-module-lirc-11.1-4.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4040</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4040" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4040" ref_url="https://www.suse.com/security/cve/CVE-2014-4040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/001013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001210.html" source="SUSE-SU"/>
    <description>
    snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4040/">CVE-2014-4040</cve>
	<bugzilla href="https://bugzilla.suse.com/883174">SUSE bug 883174</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481627" comment="powerpc-utils-1.3.6-1.15 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4043</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4043" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4043" ref_url="https://www.suse.com/security/cve/CVE-2014-4043" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000930.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00012.html" source="SUSE-SU"/>
    <description>
    The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-4043/">CVE-2014-4043</cve>
	<bugzilla href="https://bugzilla.suse.com/882600">SUSE bug 882600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939797">SUSE bug 939797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4171</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4171" ref_url="https://www.suse.com/security/cve/CVE-2014-4171" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
    <description>
    mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause a denial of service (i_mutex hold) by using the mmap system call to access a hole, as demonstrated by interfering with intended shmem activity by blocking completion of (1) an MADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-01-03"/>
	<updated date="2023-04-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4171/">CVE-2014-4171</cve>
	<bugzilla href="https://bugzilla.suse.com/883518">SUSE bug 883518</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4288</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4288" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4288" ref_url="https://www.suse.com/security/cve/CVE-2014-4288" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-4288/">CVE-2014-4288</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4336</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4336" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4336" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4336" ref_url="https://www.suse.com/security/cve/CVE-2014-4336" source="SUSE CVE"/>
    <description>
    The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host name.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4336/">CVE-2014-4336</cve>
	<bugzilla href="https://bugzilla.suse.com/871327">SUSE bug 871327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883543">SUSE bug 883543</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4337</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4337" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4337" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4337" ref_url="https://www.suse.com/security/cve/CVE-2014-4337" source="SUSE CVE"/>
    <description>
    The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted packet data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-4337/">CVE-2014-4337</cve>
	<bugzilla href="https://bugzilla.suse.com/871327">SUSE bug 871327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883543">SUSE bug 883543</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4338</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4338" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4338" ref_url="https://www.suse.com/security/cve/CVE-2014-4338" source="SUSE CVE"/>
    <description>
    cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-4338/">CVE-2014-4338</cve>
	<bugzilla href="https://bugzilla.suse.com/871327">SUSE bug 871327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883536">SUSE bug 883536</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4362</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4362" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4362" ref_url="https://www.suse.com/security/cve/CVE-2014-4362" source="SUSE CVE"/>
    <description>
    The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple ID information via a crafted app.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4362/">CVE-2014-4362</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488121" comment="davfs2-1.5.4-1.4 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4508</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4508" ref_url="https://www.suse.com/security/cve/CVE-2014-4508" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1246-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-4508/">CVE-2014-4508</cve>
	<bugzilla href="https://bugzilla.suse.com/883724">SUSE bug 883724</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4607</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4607" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4607" ref_url="https://www.suse.com/security/cve/CVE-2014-4607" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0904-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0932-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00034.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-4607/">CVE-2014-4607</cve>
	<bugzilla href="https://bugzilla.suse.com/883947">SUSE bug 883947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489167" comment="libvncclient0-0.9.10-4.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480611" comment="liblzo2-2-2.10-2.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480612" comment="lzo-devel-2.10-2.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480613" comment="lzo-devel-static-2.10-2.22 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4608</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4608" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4608" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4608" ref_url="https://www.suse.com/security/cve/CVE-2014-4608" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run.  NOTE: the author of the LZO algorithms says "the Linux kernel is *not* affected; media hype."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4608/">CVE-2014-4608</cve>
	<bugzilla href="https://bugzilla.suse.com/883948">SUSE bug 883948</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4611</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4611" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4611" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4611" ref_url="https://www.suse.com/security/cve/CVE-2014-4611" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-04-19"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4611/">CVE-2014-4611</cve>
	<bugzilla href="https://bugzilla.suse.com/883949">SUSE bug 883949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885389">SUSE bug 885389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144617" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4617</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4617" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4617" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4617" ref_url="https://www.suse.com/security/cve/CVE-2014-4617" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000911.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0866-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0952-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00042.html" source="SUSE-SU"/>
    <description>
    The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4617/">CVE-2014-4617</cve>
	<bugzilla href="https://bugzilla.suse.com/884130">SUSE bug 884130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962098">SUSE bug 962098</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481170" comment="gpg2-2.2.5-4.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481171" comment="gpg2-lang-2.2.5-4.6.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4650</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4650" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4650" ref_url="https://www.suse.com/security/cve/CVE-2014-4650" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000948.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1006-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1009-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000957.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1041-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1042-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1046-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1070-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1734-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00111.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-4650/">CVE-2014-4650</cve>
	<bugzilla href="https://bugzilla.suse.com/856835">SUSE bug 856835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/856836">SUSE bug 856836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/863741">SUSE bug 863741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885882">SUSE bug 885882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898572">SUSE bug 898572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912739">SUSE bug 912739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4715</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4715" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4715" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4715" ref_url="https://www.suse.com/security/cve/CVE-2014-4715" source="SUSE CVE"/>
    <description>
    Yann Collet LZ4 before r119, when used on certain 32-bit platforms that allocate memory beyond 0x80000000, does not properly detect integer overflows, which allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run, a different vulnerability than CVE-2014-4611.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4715/">CVE-2014-4715</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009678602" comment="lz4 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009678603" comment="liblz4-1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009678604" comment="liblz4-1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009678605" comment="liblz4-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009678602" comment="lz4 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144877" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4877</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4877" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4877" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4877" ref_url="https://www.suse.com/security/cve/CVE-2014-4877" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1366-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1366-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1464-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1380-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00026.html" source="SUSE-SU"/>
    <description>
    Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that references the same filename within two entries, one of which indicates that the filename is for a symlink.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-4877/">CVE-2014-4877</cve>
	<bugzilla href="https://bugzilla.suse.com/902709">SUSE bug 902709</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481671" comment="wget-1.19.5-3.6.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144943" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4943</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-4943" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-4943" ref_url="https://www.suse.com/security/cve/CVE-2014-4943" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4943/">CVE-2014-4943</cve>
	<bugzilla href="https://bugzilla.suse.com/887082">SUSE bug 887082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5029</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5029" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5029" ref_url="https://www.suse.com/security/cve/CVE-2014-5029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000962.html" source="SUSE-SU"/>
    <description>
    The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5029/">CVE-2014-5029</cve>
	<bugzilla href="https://bugzilla.suse.com/887240">SUSE bug 887240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487749" comment="cups-ddk-2.2.7-3.11.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481064" comment="cups-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481065" comment="cups-client-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481066" comment="cups-config-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481067" comment="cups-devel-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481068" comment="libcups2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481069" comment="libcups2-32bit-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481070" comment="libcupscgi1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481071" comment="libcupsimage2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481072" comment="libcupsmime1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481073" comment="libcupsppdc1-2.2.7-3.11.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5030</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5030" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5030" ref_url="https://www.suse.com/security/cve/CVE-2014-5030" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000962.html" source="SUSE-SU"/>
    <description>
    CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5030/">CVE-2014-5030</cve>
	<bugzilla href="https://bugzilla.suse.com/887240">SUSE bug 887240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487749" comment="cups-ddk-2.2.7-3.11.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481064" comment="cups-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481065" comment="cups-client-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481066" comment="cups-config-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481067" comment="cups-devel-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481068" comment="libcups2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481069" comment="libcups2-32bit-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481070" comment="libcupscgi1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481071" comment="libcupsimage2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481072" comment="libcupsmime1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481073" comment="libcupsppdc1-2.2.7-3.11.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5031</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5031" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5031" ref_url="https://www.suse.com/security/cve/CVE-2014-5031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000962.html" source="SUSE-SU"/>
    <description>
    The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5031/">CVE-2014-5031</cve>
	<bugzilla href="https://bugzilla.suse.com/887240">SUSE bug 887240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487749" comment="cups-ddk-2.2.7-3.11.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481064" comment="cups-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481065" comment="cups-client-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481066" comment="cups-config-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481067" comment="cups-devel-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481068" comment="libcups2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481069" comment="libcups2-32bit-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481070" comment="libcupscgi1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481071" comment="libcupsimage2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481072" comment="libcupsmime1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481073" comment="libcupsppdc1-2.2.7-3.11.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5033</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5033" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5033" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5033" ref_url="https://www.suse.com/security/cve/CVE-2014-5033" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0981-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00012.html" source="SUSE-SU"/>
    <description>
    KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, related to CVE-2013-4288 and "PID reuse race conditions."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5033/">CVE-2014-5033</cve>
	<bugzilla href="https://bugzilla.suse.com/864716">SUSE bug 864716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912121">SUSE bug 912121</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333954" comment="libvirt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336190" comment="libvirt-admin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009615940" comment="libvirt-bash-completion is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334932" comment="libvirt-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334933" comment="libvirt-daemon is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334934" comment="libvirt-daemon-config-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334935" comment="libvirt-daemon-config-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334936" comment="libvirt-daemon-driver-interface is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334937" comment="libvirt-daemon-driver-libxl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334938" comment="libvirt-daemon-driver-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334939" comment="libvirt-daemon-driver-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334940" comment="libvirt-daemon-driver-nodedev is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334941" comment="libvirt-daemon-driver-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334942" comment="libvirt-daemon-driver-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334943" comment="libvirt-daemon-driver-secret is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334944" comment="libvirt-daemon-driver-storage is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336191" comment="libvirt-daemon-driver-storage-core is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336192" comment="libvirt-daemon-driver-storage-disk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336193" comment="libvirt-daemon-driver-storage-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336194" comment="libvirt-daemon-driver-storage-logical is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336195" comment="libvirt-daemon-driver-storage-mpath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336196" comment="libvirt-daemon-driver-storage-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336197" comment="libvirt-daemon-driver-storage-scsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335515" comment="libvirt-daemon-hooks is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334945" comment="libvirt-daemon-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334946" comment="libvirt-daemon-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334947" comment="libvirt-daemon-xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334950" comment="libvirt-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334948" comment="libvirt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336198" comment="libvirt-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334949" comment="libvirt-lock-sanlock is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335514" comment="libvirt-nss is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659643" comment="polkit-default-privs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659644" comment="rpmlint is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5045</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5045" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5045" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5045" ref_url="https://www.suse.com/security/cve/CVE-2014-5045" source="SUSE CVE"/>
    <description>
    The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a symlink, which allows local users to cause a denial of service (memory consumption or use-after-free) or possibly have unspecified other impact via the umount program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5045/">CVE-2014-5045</cve>
	<bugzilla href="https://bugzilla.suse.com/889060">SUSE bug 889060</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5077</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5077" ref_url="https://www.suse.com/security/cve/CVE-2014-5077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-September/000987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1246-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
    <description>
    The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by starting to establish an association between two endpoints immediately after an exchange of INIT and INIT ACK chunks to establish an earlier association between these endpoints in the opposite direction.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-5077/">CVE-2014-5077</cve>
	<bugzilla href="https://bugzilla.suse.com/889173">SUSE bug 889173</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5119</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5119" ref_url="https://www.suse.com/security/cve/CVE-2014-5119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1125-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1129-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00009.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via vectors related to the CHARSET environment variable and gconv transliteration modules.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-5119/">CVE-2014-5119</cve>
	<bugzilla href="https://bugzilla.suse.com/892073">SUSE bug 892073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903057">SUSE bug 903057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916222">SUSE bug 916222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5139</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5139" ref_url="https://www.suse.com/security/cve/CVE-2014-5139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000966.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1052-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html" source="SUSE-SU"/>
    <description>
    The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NULL pointer dereference and client application crash) via a ServerHello message that includes an SRP ciphersuite without the required negotiation of that ciphersuite with the client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-5139/">CVE-2014-5139</cve>
	<bugzilla href="https://bugzilla.suse.com/886831">SUSE bug 886831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890759">SUSE bug 890759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/890765">SUSE bug 890765</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5209</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5209" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5209" ref_url="https://www.suse.com/security/cve/CVE-2014-5209" source="SUSE CVE"/>
    <description>
    An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-5209/">CVE-2014-5209</cve>
	<bugzilla href="https://bugzilla.suse.com/1160447">SUSE bug 1160447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338821" comment="ntp is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5277</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5277" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5277" ref_url="https://www.suse.com/security/cve/CVE-2014-5277" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1411-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00048.html" source="SUSE-SU"/>
    <description>
    Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5277/">CVE-2014-5277</cve>
	<bugzilla href="https://bugzilla.suse.com/904165">SUSE bug 904165</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5278</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5278" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5278" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5278" ref_url="https://www.suse.com/security/cve/CVE-2014-5278" source="SUSE CVE"/>
    <description>
    A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2014-5278/">CVE-2014-5278</cve>
	<bugzilla href="https://bugzilla.suse.com/1163195">SUSE bug 1163195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334435" comment="docker is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348338" comment="docker-bash-completion is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5351</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5351" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5351" ref_url="https://www.suse.com/security/cve/CVE-2014-5351" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html" source="SUSE-SU"/>
    <description>
    The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13 sends old keys in a response to a -randkey -keepold request, which allows remote authenticated users to forge tickets by leveraging administrative access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5351/">CVE-2014-5351</cve>
	<bugzilla href="https://bugzilla.suse.com/897874">SUSE bug 897874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5352</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5352" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5352" ref_url="https://www.suse.com/security/cve/CVE-2014-5352" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html" source="SUSE-SU"/>
    <description>
    The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly maintain security-context handles, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via crafted GSSAPI traffic, as demonstrated by traffic to kadmind.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5352/">CVE-2014-5352</cve>
	<bugzilla href="https://bugzilla.suse.com/1005509">SUSE bug 1005509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912002">SUSE bug 912002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5353</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5353" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5353" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5353" ref_url="https://www.suse.com/security/cve/CVE-2014-5353" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001507.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0542-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00061.html" source="SUSE-SU"/>
    <description>
    The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with no results, as demonstrated by using an incorrect object type for a password policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-5353/">CVE-2014-5353</cve>
	<bugzilla href="https://bugzilla.suse.com/910457">SUSE bug 910457</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5354</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5354" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5354" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5354" ref_url="https://www.suse.com/security/cve/CVE-2014-5354" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001507.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0542-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00061.html" source="SUSE-SU"/>
    <description>
    plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by creating a database entry for a keyless principal, as demonstrated by a kadmin "add_principal -nokey" or "purgekeys -all" command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-5354/">CVE-2014-5354</cve>
	<bugzilla href="https://bugzilla.suse.com/910458">SUSE bug 910458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5355</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5355" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5355" ref_url="https://www.suse.com/security/cve/CVE-2014-5355" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001507.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0542-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00061.html" source="SUSE-SU"/>
    <description>
    MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote attackers to (1) cause a denial of service (NULL pointer dereference) via a zero-byte version string or (2) cause a denial of service (out-of-bounds read) by omitting the '\0' character, related to appl/user_user/server.c and lib/krb5/krb/recvauth.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5355/">CVE-2014-5355</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/918595">SUSE bug 918595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5369</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5369" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5369" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5369" ref_url="https://www.suse.com/security/cve/CVE-2014-5369" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1086-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1096-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain sensitive information by sniffing the network.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5369/">CVE-2014-5369</cve>
	<bugzilla href="https://bugzilla.suse.com/893330">SUSE bug 893330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489055" comment="enigmail-2.0.9-3.13.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5471</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5471" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5471" ref_url="https://www.suse.com/security/cve/CVE-2014-5471" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system crash or reboot) via a crafted iso9660 image with a CL entry referring to a directory entry that has a CL entry.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5471/">CVE-2014-5471</cve>
	<bugzilla href="https://bugzilla.suse.com/892490">SUSE bug 892490</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5472</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-5472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-5472" ref_url="https://www.suse.com/security/cve/CVE-2014-5472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5472/">CVE-2014-5472</cve>
	<bugzilla href="https://bugzilla.suse.com/892490">SUSE bug 892490</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6040</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6040" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6040" ref_url="https://www.suse.com/security/cve/CVE-2014-6040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1129-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001191.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001214.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00009.html" source="SUSE-SU"/>
    <description>
    GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a multibyte character value of "0xffff" to the iconv function when converting (1) IBM933, (2) IBM935, (3) IBM937, (4) IBM939, or (5) IBM1364 encoded data to UTF-8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6040/">CVE-2014-6040</cve>
	<bugzilla href="https://bugzilla.suse.com/894553">SUSE bug 894553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/903057">SUSE bug 903057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916222">SUSE bug 916222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6271</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6271" ref_url="https://www.suse.com/security/cve/CVE-2014-6271" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7015693" ref_url="https://www.suse.com/support/kb/doc/?id=7015693" source="SUSE-SU"/>
		<reference ref_id="TID7015701" ref_url="https://www.suse.com/support/kb/doc/?id=7015701" source="SUSE-SU"/>
		<reference ref_id="TID7015702" ref_url="https://www.suse.com/support/kb/doc?id=7015702" source="SUSE-SU"/>
		<reference ref_id="TID7015705" ref_url="https://www.suse.com/support/kb/doc/?id=7015705" source="SUSE-SU"/>
		<reference ref_id="TID7015713" ref_url="https://www.suse.com/support/kb/doc/?id=7015713" source="SUSE-SU"/>
		<reference ref_id="TID7015715" ref_url="https://www.suse.com/support/kb/doc/?id=7015715" source="SUSE-SU"/>
		<reference ref_id="TID7015717" ref_url="https://www.suse.com/support/kb/doc/?id=7015717" source="SUSE-SU"/>
		<reference ref_id="TID7015718" ref_url="https://www.suse.com/support/kb/doc/?id=7015718" source="SUSE-SU"/>
		<reference ref_id="TID7015719" ref_url="https://www.suse.com/support/kb/doc/?id=7015719" source="SUSE-SU"/>
		<reference ref_id="TID7015720" ref_url="https://www.suse.com/support/kb/doc/?id=7015720" source="SUSE-SU"/>
		<reference ref_id="TID7015721" ref_url="https://www.suse.com/support/kb/doc/?id=7015721" source="SUSE-SU"/>
		<reference ref_id="TID7015731" ref_url="https://www.suse.com/support/kb/doc?id=7015731" source="SUSE-SU"/>
		<reference ref_id="TID7015741" ref_url="https://www.suse.com/support/kb/doc/?id=7015741" source="SUSE-SU"/>
		<reference ref_id="TID7016147" ref_url="https://www.suse.com/support/kb/doc/?id=7016147" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1310-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html" source="SUSE-SU"/>
    <description>
    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock."  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-6271/">CVE-2014-6271</cve>
	<bugzilla href="https://bugzilla.suse.com/1024628">SUSE bug 1024628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130324">SUSE bug 1130324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/870618">SUSE bug 870618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/896776">SUSE bug 896776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898346">SUSE bug 898346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898604">SUSE bug 898604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898812">SUSE bug 898812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898884">SUSE bug 898884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/900127">SUSE bug 900127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/900454">SUSE bug 900454</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481018" comment="bash-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481019" comment="bash-devel-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481020" comment="bash-doc-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481021" comment="bash-lang-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481022" comment="libreadline7-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481023" comment="readline-devel-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481024" comment="readline-doc-7.0-9.7.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6272</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6272" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6272" ref_url="https://www.suse.com/security/cve/CVE-2014-6272" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-October/001034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0132-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00070.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop.  NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-6272/">CVE-2014-6272</cve>
	<bugzilla href="https://bugzilla.suse.com/897243">SUSE bug 897243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943011">SUSE bug 943011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/947373">SUSE bug 947373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480525" comment="libevent-2_1-8-2.1.8-2.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480526" comment="libevent-devel-2.1.8-2.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6277</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6277" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6277" ref_url="https://www.suse.com/security/cve/CVE-2014-6277" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2872-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002410.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7015701" ref_url="https://www.suse.com/support/kb/doc/?id=7015701" source="SUSE-SU"/>
		<reference ref_id="TID7015702" ref_url="https://www.suse.com/support/kb/doc?id=7015702" source="SUSE-SU"/>
		<reference ref_id="TID7015705" ref_url="https://www.suse.com/support/kb/doc/?id=7015705" source="SUSE-SU"/>
		<reference ref_id="TID7015714" ref_url="https://www.suse.com/support/kb/doc?id=7015714" source="SUSE-SU"/>
		<reference ref_id="TID7015715" ref_url="https://www.suse.com/support/kb/doc/?id=7015715" source="SUSE-SU"/>
		<reference ref_id="TID7015717" ref_url="https://www.suse.com/support/kb/doc/?id=7015717" source="SUSE-SU"/>
		<reference ref_id="TID7015718" ref_url="https://www.suse.com/support/kb/doc/?id=7015718" source="SUSE-SU"/>
		<reference ref_id="TID7015719" ref_url="https://www.suse.com/support/kb/doc/?id=7015719" source="SUSE-SU"/>
		<reference ref_id="TID7015720" ref_url="https://www.suse.com/support/kb/doc/?id=7015720" source="SUSE-SU"/>
		<reference ref_id="TID7015721" ref_url="https://www.suse.com/support/kb/doc/?id=7015721" source="SUSE-SU"/>
		<reference ref_id="TID7015741" ref_url="https://www.suse.com/support/kb/doc/?id=7015741" source="SUSE-SU"/>
		<reference ref_id="TID7016147" ref_url="https://www.suse.com/support/kb/doc/?id=7016147" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1310-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2961-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00001.html" source="SUSE-SU"/>
    <description>
    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write operations) via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271 and CVE-2014-7169.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6277/">CVE-2014-6277</cve>
	<bugzilla href="https://bugzilla.suse.com/898812">SUSE bug 898812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898884">SUSE bug 898884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/900127">SUSE bug 900127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/900454">SUSE bug 900454</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481018" comment="bash-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481019" comment="bash-devel-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481020" comment="bash-doc-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481021" comment="bash-lang-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481022" comment="libreadline7-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481023" comment="readline-devel-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481024" comment="readline-doc-7.0-9.7.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6278</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6278" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6278" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6278" ref_url="https://www.suse.com/security/cve/CVE-2014-6278" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2872-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002410.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7015701" ref_url="https://www.suse.com/support/kb/doc/?id=7015701" source="SUSE-SU"/>
		<reference ref_id="TID7015702" ref_url="https://www.suse.com/support/kb/doc?id=7015702" source="SUSE-SU"/>
		<reference ref_id="TID7015705" ref_url="https://www.suse.com/support/kb/doc/?id=7015705" source="SUSE-SU"/>
		<reference ref_id="TID7015714" ref_url="https://www.suse.com/support/kb/doc?id=7015714" source="SUSE-SU"/>
		<reference ref_id="TID7015715" ref_url="https://www.suse.com/support/kb/doc/?id=7015715" source="SUSE-SU"/>
		<reference ref_id="TID7015717" ref_url="https://www.suse.com/support/kb/doc/?id=7015717" source="SUSE-SU"/>
		<reference ref_id="TID7015718" ref_url="https://www.suse.com/support/kb/doc/?id=7015718" source="SUSE-SU"/>
		<reference ref_id="TID7015719" ref_url="https://www.suse.com/support/kb/doc/?id=7015719" source="SUSE-SU"/>
		<reference ref_id="TID7015720" ref_url="https://www.suse.com/support/kb/doc/?id=7015720" source="SUSE-SU"/>
		<reference ref_id="TID7015721" ref_url="https://www.suse.com/support/kb/doc/?id=7015721" source="SUSE-SU"/>
		<reference ref_id="TID7015741" ref_url="https://www.suse.com/support/kb/doc/?id=7015741" source="SUSE-SU"/>
		<reference ref_id="TID7016147" ref_url="https://www.suse.com/support/kb/doc/?id=7016147" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1310-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2961-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00001.html" source="SUSE-SU"/>
    <description>
    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271, CVE-2014-7169, and CVE-2014-6277.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6278/">CVE-2014-6278</cve>
	<bugzilla href="https://bugzilla.suse.com/898604">SUSE bug 898604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898812">SUSE bug 898812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898884">SUSE bug 898884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/900127">SUSE bug 900127</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481018" comment="bash-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481019" comment="bash-devel-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481020" comment="bash-doc-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481021" comment="bash-lang-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481022" comment="libreadline7-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481023" comment="readline-devel-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481024" comment="readline-doc-7.0-9.7.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6407</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6407" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6407" ref_url="https://www.suse.com/security/cve/CVE-2014-6407" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1596-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6407/">CVE-2014-6407</cve>
	<bugzilla href="https://bugzilla.suse.com/907012">SUSE bug 907012</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6408</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6408" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6408" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6408" ref_url="https://www.suse.com/security/cve/CVE-2014-6408" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1596-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6408/">CVE-2014-6408</cve>
	<bugzilla href="https://bugzilla.suse.com/907014">SUSE bug 907014</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6410</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6410" ref_url="https://www.suse.com/security/cve/CVE-2014-6410" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
    <description>
    The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-04-19"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6410/">CVE-2014-6410</cve>
	<bugzilla href="https://bugzilla.suse.com/896689">SUSE bug 896689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6418</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6418" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6418" ref_url="https://www.suse.com/security/cve/CVE-2014-6418" source="SUSE CVE"/>
    <description>
    net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth replies, which allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via crafted data from the IP address of a Ceph Monitor.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-22"/>
	<updated date="2023-05-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-6418/">CVE-2014-6418</cve>
	<bugzilla href="https://bugzilla.suse.com/896384">SUSE bug 896384</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6456</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6456" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6456" ref_url="https://www.suse.com/security/cve/CVE-2014-6456" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6456/">CVE-2014-6456</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146457" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6457</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6457" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6457" ref_url="https://www.suse.com/security/cve/CVE-2014-6457" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6457/">CVE-2014-6457</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6458</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6458" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6458" ref_url="https://www.suse.com/security/cve/CVE-2014-6458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6458/">CVE-2014-6458</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6466</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6466" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6466" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6466" ref_url="https://www.suse.com/security/cve/CVE-2014-6466" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Internet Explorer, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6466/">CVE-2014-6466</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6476</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6476" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6476" ref_url="https://www.suse.com/security/cve/CVE-2014-6476" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6527.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6476/">CVE-2014-6476</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6492</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6492" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6492" ref_url="https://www.suse.com/security/cve/CVE-2014-6492" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6492/">CVE-2014-6492</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6493</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6493" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6493" ref_url="https://www.suse.com/security/cve/CVE-2014-6493" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6493/">CVE-2014-6493</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6502</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6502" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6502" ref_url="https://www.suse.com/security/cve/CVE-2014-6502" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6502/">CVE-2014-6502</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6503</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6503" ref_url="https://www.suse.com/security/cve/CVE-2014-6503" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6503/">CVE-2014-6503</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6506</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6506" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6506" ref_url="https://www.suse.com/security/cve/CVE-2014-6506" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6506/">CVE-2014-6506</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6511</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6511" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6511" ref_url="https://www.suse.com/security/cve/CVE-2014-6511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6511/">CVE-2014-6511</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6512</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6512" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6512" ref_url="https://www.suse.com/security/cve/CVE-2014-6512" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6512/">CVE-2014-6512</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6513</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6513" ref_url="https://www.suse.com/security/cve/CVE-2014-6513" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6513/">CVE-2014-6513</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6515</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6515" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6515" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6515" ref_url="https://www.suse.com/security/cve/CVE-2014-6515" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6515/">CVE-2014-6515</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6527</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6527" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6527" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6527" ref_url="https://www.suse.com/security/cve/CVE-2014-6527" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6476.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6527/">CVE-2014-6527</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6531</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6531" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6531" ref_url="https://www.suse.com/security/cve/CVE-2014-6531" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6531/">CVE-2014-6531</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6532</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6532" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6532" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6532" ref_url="https://www.suse.com/security/cve/CVE-2014-6532" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6532/">CVE-2014-6532</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6558</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-6558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-6558" ref_url="https://www.suse.com/security/cve/CVE-2014-6558" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1526-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Security.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-6558/">CVE-2014-6558</cve>
	<bugzilla href="https://bugzilla.suse.com/901239">SUSE bug 901239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901242">SUSE bug 901242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901246">SUSE bug 901246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904889">SUSE bug 904889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7141</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7141" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7141" ref_url="https://www.suse.com/security/cve/CVE-2014-7141" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
    <description>
    The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7141/">CVE-2014-7141</cve>
	<bugzilla href="https://bugzilla.suse.com/1040640">SUSE bug 1040640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/891268">SUSE bug 891268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/895773">SUSE bug 895773</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488449" comment="squid-4.4-5.3.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7142</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7142" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7142" ref_url="https://www.suse.com/security/cve/CVE-2014-7142" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
    <description>
    The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7142/">CVE-2014-7142</cve>
	<bugzilla href="https://bugzilla.suse.com/895773">SUSE bug 895773</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973782">SUSE bug 973782</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488449" comment="squid-4.4-5.3.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7144</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7144" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7144" ref_url="https://www.suse.com/security/cve/CVE-2014-7144" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001461.html" source="SUSE-SU"/>
    <description>
    OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7144/">CVE-2014-7144</cve>
	<bugzilla href="https://bugzilla.suse.com/897103">SUSE bug 897103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928205">SUSE bug 928205</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488086" comment="python3-keystoneclient-3.15.0-2.33 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7169</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7169" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7169" ref_url="https://www.suse.com/security/cve/CVE-2014-7169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1247-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7015693" ref_url="https://www.suse.com/support/kb/doc/?id=7015693" source="SUSE-SU"/>
		<reference ref_id="TID7015701" ref_url="https://www.suse.com/support/kb/doc/?id=7015701" source="SUSE-SU"/>
		<reference ref_id="TID7015702" ref_url="https://www.suse.com/support/kb/doc?id=7015702" source="SUSE-SU"/>
		<reference ref_id="TID7015705" ref_url="https://www.suse.com/support/kb/doc/?id=7015705" source="SUSE-SU"/>
		<reference ref_id="TID7015713" ref_url="https://www.suse.com/support/kb/doc/?id=7015713" source="SUSE-SU"/>
		<reference ref_id="TID7015714" ref_url="https://www.suse.com/support/kb/doc?id=7015714" source="SUSE-SU"/>
		<reference ref_id="TID7015715" ref_url="https://www.suse.com/support/kb/doc/?id=7015715" source="SUSE-SU"/>
		<reference ref_id="TID7015717" ref_url="https://www.suse.com/support/kb/doc/?id=7015717" source="SUSE-SU"/>
		<reference ref_id="TID7015718" ref_url="https://www.suse.com/support/kb/doc/?id=7015718" source="SUSE-SU"/>
		<reference ref_id="TID7015719" ref_url="https://www.suse.com/support/kb/doc/?id=7015719" source="SUSE-SU"/>
		<reference ref_id="TID7015720" ref_url="https://www.suse.com/support/kb/doc/?id=7015720" source="SUSE-SU"/>
		<reference ref_id="TID7015721" ref_url="https://www.suse.com/support/kb/doc/?id=7015721" source="SUSE-SU"/>
		<reference ref_id="TID7015731" ref_url="https://www.suse.com/support/kb/doc?id=7015731" source="SUSE-SU"/>
		<reference ref_id="TID7015741" ref_url="https://www.suse.com/support/kb/doc/?id=7015741" source="SUSE-SU"/>
		<reference ref_id="TID7016147" ref_url="https://www.suse.com/support/kb/doc/?id=7016147" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1310-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html" source="SUSE-SU"/>
    <description>
    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-7169/">CVE-2014-7169</cve>
	<bugzilla href="https://bugzilla.suse.com/1024628">SUSE bug 1024628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130324">SUSE bug 1130324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/870618">SUSE bug 870618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/896776">SUSE bug 896776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898346">SUSE bug 898346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898762">SUSE bug 898762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898812">SUSE bug 898812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898884">SUSE bug 898884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/899039">SUSE bug 899039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/899266">SUSE bug 899266</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/900127">SUSE bug 900127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/900454">SUSE bug 900454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/902237">SUSE bug 902237</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481018" comment="bash-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481019" comment="bash-devel-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481020" comment="bash-doc-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481021" comment="bash-lang-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481022" comment="libreadline7-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481023" comment="readline-devel-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481024" comment="readline-doc-7.0-9.7.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7185</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7185" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7185" ref_url="https://www.suse.com/security/cve/CVE-2014-7185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1292-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1734-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00111.html" source="SUSE-SU"/>
    <description>
    Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7185/">CVE-2014-7185</cve>
	<bugzilla href="https://bugzilla.suse.com/898572">SUSE bug 898572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912739">SUSE bug 912739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913479">SUSE bug 913479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955182">SUSE bug 955182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7186</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7186" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7186" ref_url="https://www.suse.com/security/cve/CVE-2014-7186" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1247-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7015701" ref_url="https://www.suse.com/support/kb/doc/?id=7015701" source="SUSE-SU"/>
		<reference ref_id="TID7015702" ref_url="https://www.suse.com/support/kb/doc?id=7015702" source="SUSE-SU"/>
		<reference ref_id="TID7015705" ref_url="https://www.suse.com/support/kb/doc/?id=7015705" source="SUSE-SU"/>
		<reference ref_id="TID7015715" ref_url="https://www.suse.com/support/kb/doc/?id=7015715" source="SUSE-SU"/>
		<reference ref_id="TID7015717" ref_url="https://www.suse.com/support/kb/doc/?id=7015717" source="SUSE-SU"/>
		<reference ref_id="TID7015718" ref_url="https://www.suse.com/support/kb/doc/?id=7015718" source="SUSE-SU"/>
		<reference ref_id="TID7015719" ref_url="https://www.suse.com/support/kb/doc/?id=7015719" source="SUSE-SU"/>
		<reference ref_id="TID7015720" ref_url="https://www.suse.com/support/kb/doc/?id=7015720" source="SUSE-SU"/>
		<reference ref_id="TID7015721" ref_url="https://www.suse.com/support/kb/doc/?id=7015721" source="SUSE-SU"/>
		<reference ref_id="TID7015741" ref_url="https://www.suse.com/support/kb/doc/?id=7015741" source="SUSE-SU"/>
		<reference ref_id="TID7016147" ref_url="https://www.suse.com/support/kb/doc/?id=7016147" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html" source="SUSE-SU"/>
    <description>
    The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7186/">CVE-2014-7186</cve>
	<bugzilla href="https://bugzilla.suse.com/1024628">SUSE bug 1024628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898603">SUSE bug 898603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898812">SUSE bug 898812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898884">SUSE bug 898884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/899039">SUSE bug 899039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481018" comment="bash-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481019" comment="bash-devel-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481020" comment="bash-doc-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481021" comment="bash-lang-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481022" comment="libreadline7-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481023" comment="readline-devel-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481024" comment="readline-doc-7.0-9.7.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7187</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7187" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7187" ref_url="https://www.suse.com/security/cve/CVE-2014-7187" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1247-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7015701" ref_url="https://www.suse.com/support/kb/doc/?id=7015701" source="SUSE-SU"/>
		<reference ref_id="TID7015702" ref_url="https://www.suse.com/support/kb/doc?id=7015702" source="SUSE-SU"/>
		<reference ref_id="TID7015705" ref_url="https://www.suse.com/support/kb/doc/?id=7015705" source="SUSE-SU"/>
		<reference ref_id="TID7015715" ref_url="https://www.suse.com/support/kb/doc/?id=7015715" source="SUSE-SU"/>
		<reference ref_id="TID7015717" ref_url="https://www.suse.com/support/kb/doc/?id=7015717" source="SUSE-SU"/>
		<reference ref_id="TID7015718" ref_url="https://www.suse.com/support/kb/doc/?id=7015718" source="SUSE-SU"/>
		<reference ref_id="TID7015719" ref_url="https://www.suse.com/support/kb/doc/?id=7015719" source="SUSE-SU"/>
		<reference ref_id="TID7015720" ref_url="https://www.suse.com/support/kb/doc/?id=7015720" source="SUSE-SU"/>
		<reference ref_id="TID7015721" ref_url="https://www.suse.com/support/kb/doc/?id=7015721" source="SUSE-SU"/>
		<reference ref_id="TID7015741" ref_url="https://www.suse.com/support/kb/doc/?id=7015741" source="SUSE-SU"/>
		<reference ref_id="TID7016147" ref_url="https://www.suse.com/support/kb/doc/?id=7016147" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1310-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7187/">CVE-2014-7187</cve>
	<bugzilla href="https://bugzilla.suse.com/1024628">SUSE bug 1024628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898603">SUSE bug 898603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898812">SUSE bug 898812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898884">SUSE bug 898884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/899039">SUSE bug 899039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481018" comment="bash-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481019" comment="bash-devel-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481020" comment="bash-doc-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481021" comment="bash-lang-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481022" comment="libreadline7-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481023" comment="readline-devel-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481024" comment="readline-doc-7.0-9.7.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7202</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7202" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7202" ref_url="https://www.suse.com/security/cve/CVE-2014-7202" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1381-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    stream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7202/">CVE-2014-7202</cve>
	<bugzilla href="https://bugzilla.suse.com/898917">SUSE bug 898917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481590" comment="libzmq5-4.2.3-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481591" comment="zeromq-devel-4.2.3-3.3.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7203</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7203" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7203" ref_url="https://www.suse.com/security/cve/CVE-2014-7203" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1381-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7203/">CVE-2014-7203</cve>
	<bugzilla href="https://bugzilla.suse.com/898917">SUSE bug 898917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481590" comment="libzmq5-4.2.3-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481591" comment="zeromq-devel-4.2.3-3.3.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7204</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7204" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7204" ref_url="https://www.suse.com/security/cve/CVE-2014-7204" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002216.html" source="SUSE-SU"/>
    <description>
    jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-7204/">CVE-2014-7204</cve>
	<bugzilla href="https://bugzilla.suse.com/899486">SUSE bug 899486</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487630" comment="ctags-5.8-1.27 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7207</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7207" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7207" ref_url="https://www.suse.com/security/cve/CVE-2014-7207" source="SUSE CVE"/>
    <description>
    A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6_select_ident function calls, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging (1) tun or (2) macvtap device access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7207/">CVE-2014-7207</cve>
	<bugzilla href="https://bugzilla.suse.com/1139403">SUSE bug 1139403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/902351">SUSE bug 902351</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7283</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7283" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7283" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7283" ref_url="https://www.suse.com/security/cve/CVE-2014-7283" source="SUSE CVE"/>
    <description>
    The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7283/">CVE-2014-7283</cve>
	<bugzilla href="https://bugzilla.suse.com/899480">SUSE bug 899480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7300</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7300" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7300" ref_url="https://www.suse.com/security/cve/CVE-2014-7300" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001293.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1348-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00005.html" source="SUSE-SU"/>
    <description>
    GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7300/">CVE-2014-7300</cve>
	<bugzilla href="https://bugzilla.suse.com/900031">SUSE bug 900031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482706" comment="gnome-settings-daemon-3.26.2-6.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482707" comment="gnome-settings-daemon-devel-3.26.2-6.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482708" comment="gnome-settings-daemon-lang-3.26.2-6.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7815</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7815" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7815" ref_url="https://www.suse.com/security/cve/CVE-2014-7815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7815/">CVE-2014-7815</cve>
	<bugzilla href="https://bugzilla.suse.com/902737">SUSE bug 902737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962627">SUSE bug 962627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7817</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7817" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7817" ref_url="https://www.suse.com/security/cve/CVE-2014-7817" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001305.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0351-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html" source="SUSE-SU"/>
    <description>
    The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$((`...`))".
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7817/">CVE-2014-7817</cve>
	<bugzilla href="https://bugzilla.suse.com/906371">SUSE bug 906371</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7822</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7822" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7822" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7822" ref_url="https://www.suse.com/security/cve/CVE-2014-7822" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1488-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html" source="SUSE-SU"/>
    <description>
    The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7822/">CVE-2014-7822</cve>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915322">SUSE bug 915322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915517">SUSE bug 915517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939240">SUSE bug 939240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7823</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7823" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7823" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7823" ref_url="https://www.suse.com/security/cve/CVE-2014-7823" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001247.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1471-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00083.html" source="SUSE-SU"/>
    <description>
    The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7823/">CVE-2014-7823</cve>
	<bugzilla href="https://bugzilla.suse.com/904176">SUSE bug 904176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481528" comment="libvirt-libs-5.1.0-6.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488366" comment="libvirt-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488367" comment="libvirt-admin-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488368" comment="libvirt-bash-completion-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488369" comment="libvirt-client-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488370" comment="libvirt-daemon-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488371" comment="libvirt-daemon-config-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488372" comment="libvirt-daemon-config-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488373" comment="libvirt-daemon-driver-interface-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488374" comment="libvirt-daemon-driver-libxl-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488375" comment="libvirt-daemon-driver-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488376" comment="libvirt-daemon-driver-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488377" comment="libvirt-daemon-driver-nodedev-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488378" comment="libvirt-daemon-driver-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488379" comment="libvirt-daemon-driver-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488380" comment="libvirt-daemon-driver-secret-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488381" comment="libvirt-daemon-driver-storage-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488382" comment="libvirt-daemon-driver-storage-core-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488383" comment="libvirt-daemon-driver-storage-disk-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488384" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488385" comment="libvirt-daemon-driver-storage-logical-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488386" comment="libvirt-daemon-driver-storage-mpath-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488387" comment="libvirt-daemon-driver-storage-rbd-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488388" comment="libvirt-daemon-driver-storage-scsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488389" comment="libvirt-daemon-hooks-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488390" comment="libvirt-daemon-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488391" comment="libvirt-daemon-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488392" comment="libvirt-daemon-xen-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488393" comment="libvirt-devel-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488394" comment="libvirt-doc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488395" comment="libvirt-lock-sanlock-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488396" comment="libvirt-nss-5.1.0-6.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7824</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7824" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7824" ref_url="https://www.suse.com/security/cve/CVE-2014-7824" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1455-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00078.html" source="SUSE-SU"/>
    <description>
    D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3636.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7824/">CVE-2014-7824</cve>
	<bugzilla href="https://bugzilla.suse.com/904017">SUSE bug 904017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481093" comment="dbus-1-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481094" comment="dbus-1-devel-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481095" comment="dbus-1-x11-1.12.2-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481096" comment="libdbus-1-3-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481097" comment="libdbus-1-3-32bit-1.12.2-6.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7840</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7840" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7840" ref_url="https://www.suse.com/security/cve/CVE-2014-7840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001243.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001247.html" source="SUSE-SU"/>
    <description>
    The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7840/">CVE-2014-7840</cve>
	<bugzilla href="https://bugzilla.suse.com/905097">SUSE bug 905097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7842</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7842" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7842" ref_url="https://www.suse.com/security/cve/CVE-2014-7842" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    Race condition in arch/x86/kvm/x86.c in the Linux kernel before 3.17.4 allows guest OS users to cause a denial of service (guest OS crash) via a crafted application that performs an MMIO transaction or a PIO transaction to trigger a guest userspace emulation error report, a similar issue to CVE-2010-5313.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7842/">CVE-2014-7842</cve>
	<bugzilla href="https://bugzilla.suse.com/905312">SUSE bug 905312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/907822">SUSE bug 907822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7844</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7844" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7844" ref_url="https://www.suse.com/security/cve/CVE-2014-7844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1713-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00097.html" source="SUSE-SU"/>
    <description>
    BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-7844/">CVE-2014-7844</cve>
	<bugzilla href="https://bugzilla.suse.com/909208">SUSE bug 909208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480839" comment="mailx-12.5-1.87 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7970</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7970" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7970" ref_url="https://www.suse.com/security/cve/CVE-2014-7970" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
    <description>
    The pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certain locations of a chroot directory, which allows local users to cause a denial of service (mount-tree loop) via . (dot) values in both arguments to the pivot_root system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-7970/">CVE-2014-7970</cve>
	<bugzilla href="https://bugzilla.suse.com/900644">SUSE bug 900644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7975</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-7975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7975" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-7975" ref_url="https://www.suse.com/security/cve/CVE-2014-7975" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
    <description>
    The do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAP_SYS_ADMIN capability for do_remount_sb calls that change the root filesystem to read-only, which allows local users to cause a denial of service (loss of writability) by making certain unshare system calls, clearing the / MNT_LOCKED flag, and making an MNT_FORCE umount system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-04-19"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-7975/">CVE-2014-7975</cve>
	<bugzilla href="https://bugzilla.suse.com/900392">SUSE bug 900392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8086</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8086" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8086" ref_url="https://www.suse.com/security/cve/CVE-2014-8086" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1071-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a write action and an F_SETFL fcntl operation for the O_DIRECT flag.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8086/">CVE-2014-8086</cve>
	<bugzilla href="https://bugzilla.suse.com/900881">SUSE bug 900881</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8104</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8104" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8104" ref_url="https://www.suse.com/security/cve/CVE-2014-8104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1605-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00008.html" source="SUSE-SU"/>
    <description>
    OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8104/">CVE-2014-8104</cve>
	<bugzilla href="https://bugzilla.suse.com/907764">SUSE bug 907764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481609" comment="openvpn-2.4.3-5.3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481610" comment="openvpn-auth-pam-plugin-2.4.3-5.3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481611" comment="openvpn-devel-2.4.3-5.3.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8105</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8105" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8105" ref_url="https://www.suse.com/security/cve/CVE-2014-8105" source="SUSE CVE"/>
    <description>
    389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog" LDAP sub-tree, which allows remote attackers to obtain sensitive information from the changelog via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8105/">CVE-2014-8105</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488105" comment="389-ds-1.4.0.3-2.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488106" comment="389-ds-devel-1.4.0.3-2.39 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8106</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8106" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8106" ref_url="https://www.suse.com/security/cve/CVE-2014-8106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001243.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8106/">CVE-2014-8106</cve>
	<bugzilla href="https://bugzilla.suse.com/1023004">SUSE bug 1023004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/907805">SUSE bug 907805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8108</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8108" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8108" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8108" ref_url="https://www.suse.com/security/cve/CVE-2014-8108" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0153-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0155-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1725-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00107.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8108/">CVE-2014-8108</cve>
	<bugzilla href="https://bugzilla.suse.com/909935">SUSE bug 909935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8109</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8109" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8109" ref_url="https://www.suse.com/security/cve/CVE-2014-8109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001415.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00108.html" source="SUSE-SU"/>
    <description>
    mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8109/">CVE-2014-8109</cve>
	<bugzilla href="https://bugzilla.suse.com/909715">SUSE bug 909715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8111</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8111" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8111" ref_url="https://www.suse.com/security/cve/CVE-2014-8111" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3970-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183970-1.html" source="SUSE-SU"/>
    <description>
    Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8111/">CVE-2014-8111</cve>
	<bugzilla href="https://bugzilla.suse.com/927845">SUSE bug 927845</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488310" comment="apache2-mod_jk-1.2.43-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8112</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8112" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8112" ref_url="https://www.suse.com/security/cve/CVE-2014-8112" source="SUSE CVE"/>
    <description>
    389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when the nsslapd-unhashed-pw-switch option is set to off, which allows remote authenticated users to obtain sensitive information by reading the Changelog.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8112/">CVE-2014-8112</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488105" comment="389-ds-1.4.0.3-2.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488106" comment="389-ds-devel-1.4.0.3-2.39 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8116</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8116" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8116" ref_url="https://www.suse.com/security/cve/CVE-2014-8116" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003403.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1721-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00071.html" source="SUSE-SU"/>
    <description>
    The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8116/">CVE-2014-8116</cve>
	<bugzilla href="https://bugzilla.suse.com/910252">SUSE bug 910252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910253">SUSE bug 910253</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917152">SUSE bug 917152</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481116" comment="file-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481117" comment="file-devel-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481118" comment="file-magic-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481119" comment="libmagic1-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481120" comment="libmagic1-32bit-5.32-7.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8117</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8117" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8117" ref_url="https://www.suse.com/security/cve/CVE-2014-8117" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003403.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1721-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00071.html" source="SUSE-SU"/>
    <description>
    softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8117/">CVE-2014-8117</cve>
	<bugzilla href="https://bugzilla.suse.com/910252">SUSE bug 910252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910253">SUSE bug 910253</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917152">SUSE bug 917152</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481116" comment="file-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481117" comment="file-devel-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481118" comment="file-magic-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481119" comment="libmagic1-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481120" comment="libmagic1-32bit-5.32-7.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8119</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8119" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8119" ref_url="https://www.suse.com/security/cve/CVE-2014-8119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003801.html" source="SUSE-SU"/>
    <description>
    The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8119/">CVE-2014-8119</cve>
	<bugzilla href="https://bugzilla.suse.com/925225">SUSE bug 925225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480071" comment="augeas-1.10.1-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480072" comment="augeas-devel-1.10.1-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480073" comment="augeas-lenses-1.10.1-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480074" comment="libaugeas0-1.10.1-1.11 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8121</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8121" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8121" ref_url="https://www.suse.com/security/cve/CVE-2014-8121" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001651.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0955-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00084.html" source="SUSE-SU"/>
    <description>
    DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers the file pointer to be reset.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8121/">CVE-2014-8121</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/918187">SUSE bug 918187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945779">SUSE bug 945779</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8127</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8127" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8127" ref_url="https://www.suse.com/security/cve/CVE-2014-8127" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001561.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1213-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2) compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5) tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7) TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8127/">CVE-2014-8127</cve>
	<bugzilla href="https://bugzilla.suse.com/1206220">SUSE bug 1206220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914890">SUSE bug 914890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916925">SUSE bug 916925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942690">SUSE bug 942690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8128</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8128" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8128" ref_url="https://www.suse.com/security/cve/CVE-2014-8128" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001561.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0073-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1213-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html" source="SUSE-SU"/>
    <description>
    LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-04"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8128/">CVE-2014-8128</cve>
	<bugzilla href="https://bugzilla.suse.com/1007276">SUSE bug 1007276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017690">SUSE bug 1017690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1040322">SUSE bug 1040322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206220">SUSE bug 1206220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914890">SUSE bug 914890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916925">SUSE bug 916925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942690">SUSE bug 942690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960341">SUSE bug 960341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974621">SUSE bug 974621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983436">SUSE bug 983436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8129</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8129" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8129" ref_url="https://www.suse.com/security/cve/CVE-2014-8129" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001561.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1213-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00019.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-8129/">CVE-2014-8129</cve>
	<bugzilla href="https://bugzilla.suse.com/1206220">SUSE bug 1206220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914890">SUSE bug 914890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916925">SUSE bug 916925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942690">SUSE bug 942690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8130</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8130" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8130" ref_url="https://www.suse.com/security/cve/CVE-2014-8130" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001561.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1213-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00019.html" source="SUSE-SU"/>
    <description>
    The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-04"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-8130/">CVE-2014-8130</cve>
	<bugzilla href="https://bugzilla.suse.com/1206220">SUSE bug 1206220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914890">SUSE bug 914890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916925">SUSE bug 916925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942690">SUSE bug 942690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8131</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8131" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8131" ref_url="https://www.suse.com/security/cve/CVE-2014-8131" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0008-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00005.html" source="SUSE-SU"/>
    <description>
    The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service (deadlock or segmentation fault and crash) via a request to access the users does not have privileges to access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8131/">CVE-2014-8131</cve>
	<bugzilla href="https://bugzilla.suse.com/909274">SUSE bug 909274</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481528" comment="libvirt-libs-5.1.0-6.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488366" comment="libvirt-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488367" comment="libvirt-admin-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488368" comment="libvirt-bash-completion-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488369" comment="libvirt-client-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488370" comment="libvirt-daemon-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488371" comment="libvirt-daemon-config-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488372" comment="libvirt-daemon-config-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488373" comment="libvirt-daemon-driver-interface-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488374" comment="libvirt-daemon-driver-libxl-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488375" comment="libvirt-daemon-driver-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488376" comment="libvirt-daemon-driver-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488377" comment="libvirt-daemon-driver-nodedev-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488378" comment="libvirt-daemon-driver-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488379" comment="libvirt-daemon-driver-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488380" comment="libvirt-daemon-driver-secret-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488381" comment="libvirt-daemon-driver-storage-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488382" comment="libvirt-daemon-driver-storage-core-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488383" comment="libvirt-daemon-driver-storage-disk-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488384" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488385" comment="libvirt-daemon-driver-storage-logical-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488386" comment="libvirt-daemon-driver-storage-mpath-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488387" comment="libvirt-daemon-driver-storage-rbd-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488388" comment="libvirt-daemon-driver-storage-scsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488389" comment="libvirt-daemon-hooks-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488390" comment="libvirt-daemon-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488391" comment="libvirt-daemon-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488392" comment="libvirt-daemon-xen-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488393" comment="libvirt-devel-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488394" comment="libvirt-doc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488395" comment="libvirt-lock-sanlock-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488396" comment="libvirt-nss-5.1.0-6.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8132</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8132" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8132" ref_url="https://www.suse.com/security/cve/CVE-2014-8132" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0017-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00007.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8132/">CVE-2014-8132</cve>
	<bugzilla href="https://bugzilla.suse.com/910790">SUSE bug 910790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928323">SUSE bug 928323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481496" comment="libssh-devel-0.8.4-8.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481497" comment="libssh4-0.8.4-8.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481498" comment="libssh4-32bit-0.8.4-8.26 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8133</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8133" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8133" ref_url="https://www.suse.com/security/cve/CVE-2014-8133" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1735-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
    <description>
    arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a set_thread_area system call and later reads a 16-bit value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-13"/>
	<updated date="2022-11-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8133/">CVE-2014-8133</cve>
	<bugzilla href="https://bugzilla.suse.com/817142">SUSE bug 817142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/906545">SUSE bug 906545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/907818">SUSE bug 907818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909077">SUSE bug 909077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8134</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8134" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8134" ref_url="https://www.suse.com/security/cve/CVE-2014-8134" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html" source="SUSE-SU"/>
    <description>
    The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_enabled setting for KVM guest kernels, which makes it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-8134/">CVE-2014-8134</cve>
	<bugzilla href="https://bugzilla.suse.com/907818">SUSE bug 907818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909077">SUSE bug 909077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909078">SUSE bug 909078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8137</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8137" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8137" ref_url="https://www.suse.com/security/cve/CVE-2014-8137" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0258-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001216.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0039-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0042-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8137/">CVE-2014-8137</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909474">SUSE bug 909474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909475">SUSE bug 909475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911837">SUSE bug 911837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968373">SUSE bug 968373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969776">SUSE bug 969776</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8138</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8138" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8138" ref_url="https://www.suse.com/security/cve/CVE-2014-8138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0258-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001216.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0217-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8138/">CVE-2014-8138</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909474">SUSE bug 909474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909475">SUSE bug 909475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911837">SUSE bug 911837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969776">SUSE bug 969776</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8139</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8139" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8139" ref_url="https://www.suse.com/security/cve/CVE-2014-8139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0026-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001255.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0240-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00036.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-8139/">CVE-2014-8139</cve>
	<bugzilla href="https://bugzilla.suse.com/909214">SUSE bug 909214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915880">SUSE bug 915880</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8140</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8140" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8140" ref_url="https://www.suse.com/security/cve/CVE-2014-8140" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0026-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001161.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0240-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00036.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-8140/">CVE-2014-8140</cve>
	<bugzilla href="https://bugzilla.suse.com/909214">SUSE bug 909214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914442">SUSE bug 914442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915880">SUSE bug 915880</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8141</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8141" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8141" ref_url="https://www.suse.com/security/cve/CVE-2014-8141" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0026-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001161.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0240-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00036.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-8141/">CVE-2014-8141</cve>
	<bugzilla href="https://bugzilla.suse.com/909214">SUSE bug 909214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915880">SUSE bug 915880</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8143</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8143" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8143" ref_url="https://www.suse.com/security/cve/CVE-2014-8143" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
    <description>
    Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8143/">CVE-2014-8143</cve>
	<bugzilla href="https://bugzilla.suse.com/914279">SUSE bug 914279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8146</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8146" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8146" ref_url="https://www.suse.com/security/cve/CVE-2014-8146" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001669.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1401-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004696.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2364-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00103.html" source="SUSE-SU"/>
    <description>
    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8146/">CVE-2014-8146</cve>
	<bugzilla href="https://bugzilla.suse.com/1066493">SUSE bug 1066493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910805">SUSE bug 910805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927951">SUSE bug 927951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929629">SUSE bug 929629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959178">SUSE bug 959178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8147</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8147" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8147" ref_url="https://www.suse.com/security/cve/CVE-2014-8147" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001669.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1401-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004696.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2364-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00103.html" source="SUSE-SU"/>
    <description>
    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8147/">CVE-2014-8147</cve>
	<bugzilla href="https://bugzilla.suse.com/1066493">SUSE bug 1066493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079317">SUSE bug 1079317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910805">SUSE bug 910805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/910806">SUSE bug 910806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927951">SUSE bug 927951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929629">SUSE bug 929629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959178">SUSE bug 959178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8148</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8148" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8148" ref_url="https://www.suse.com/security/cve/CVE-2014-8148" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0111-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00051.html" source="SUSE-SU"/>
    <description>
    The default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary method calls or signals to any process on the system bus and possibly execute arbitrary code with root privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8148/">CVE-2014-8148</cve>
	<bugzilla href="https://bugzilla.suse.com/912023">SUSE bug 912023</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481093" comment="dbus-1-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481094" comment="dbus-1-devel-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481095" comment="dbus-1-x11-1.12.2-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481096" comment="libdbus-1-3-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481097" comment="libdbus-1-3-32bit-1.12.2-6.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8150</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8150" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8150" ref_url="https://www.suse.com/security/cve/CVE-2014-8150" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001164.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001199.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0248-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00040.html" source="SUSE-SU"/>
    <description>
    CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8150/">CVE-2014-8150</cve>
	<bugzilla href="https://bugzilla.suse.com/911363">SUSE bug 911363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8157</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8157" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8157" ref_url="https://www.suse.com/security/cve/CVE-2014-8157" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0288-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001223.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0200-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8157/">CVE-2014-8157</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911837">SUSE bug 911837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969776">SUSE bug 969776</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8158</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8158" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8158" ref_url="https://www.suse.com/security/cve/CVE-2014-8158" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0288-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0200-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8158/">CVE-2014-8158</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911837">SUSE bug 911837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969776">SUSE bug 969776</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8160</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8160" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8160" ref_url="https://www.suse.com/security/cve/CVE-2014-8160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="TID7016668" ref_url="https://www.suse.com/support/kb/doc?id=7016668" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html" source="SUSE-SU"/>
    <description>
    net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8160/">CVE-2014-8160</cve>
	<bugzilla href="https://bugzilla.suse.com/857643">SUSE bug 857643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913059">SUSE bug 913059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8169</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8169" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8169" ref_url="https://www.suse.com/security/cve/CVE-2014-8169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001428.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0475-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00033.html" source="SUSE-SU"/>
    <description>
    automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8169/">CVE-2014-8169</cve>
	<bugzilla href="https://bugzilla.suse.com/917977">SUSE bug 917977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481003" comment="autofs-5.1.3-7.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8178</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8178" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8178" ref_url="https://www.suse.com/security/cve/CVE-2014-8178" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1773-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2073-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00125.html" source="SUSE-SU"/>
    <description>
    Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-8178/">CVE-2014-8178</cve>
	<bugzilla href="https://bugzilla.suse.com/949660">SUSE bug 949660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8179</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8179" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8179" ref_url="https://www.suse.com/security/cve/CVE-2014-8179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1773-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2073-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00125.html" source="SUSE-SU"/>
    <description>
    Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-8179/">CVE-2014-8179</cve>
	<bugzilla href="https://bugzilla.suse.com/949660">SUSE bug 949660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8240</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8240" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8240" ref_url="https://www.suse.com/security/cve/CVE-2014-8240" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001100.html" source="SUSE-SU"/>
    <description>
    Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8240/">CVE-2014-8240</cve>
	<bugzilla href="https://bugzilla.suse.com/900896">SUSE bug 900896</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486659" comment="libXvnc-devel-1.9.0-17.32 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481261" comment="libXvnc1-1.9.0-17.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481262" comment="tigervnc-1.9.0-17.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481263" comment="xorg-x11-Xvnc-1.9.0-17.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481264" comment="xorg-x11-Xvnc-module-1.9.0-17.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481265" comment="xorg-x11-Xvnc-novnc-1.9.0-17.32 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8242</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8242" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8242" ref_url="https://www.suse.com/security/cve/CVE-2014-8242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001813.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1752-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00034.html" source="SUSE-SU"/>
    <description>
    librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8242/">CVE-2014-8242</cve>
	<bugzilla href="https://bugzilla.suse.com/900914">SUSE bug 900914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922710">SUSE bug 922710</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480710" comment="librsync-devel-1.0.0-1.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480711" comment="librsync2-1.0.0-1.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480919" comment="rsync-3.1.3-2.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8275</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8275" ref_url="https://www.suse.com/security/cve/CVE-2014-8275" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, related to crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and crypto/x509/x_all.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8275/">CVE-2014-8275</cve>
	<bugzilla href="https://bugzilla.suse.com/912018">SUSE bug 912018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915848">SUSE bug 915848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8369</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8369" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8369" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8369" ref_url="https://www.suse.com/security/cve/CVE-2014-8369" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2014-3601.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-8369/">CVE-2014-8369</cve>
	<bugzilla href="https://bugzilla.suse.com/892782">SUSE bug 892782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/902675">SUSE bug 902675</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8500</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8500" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8500" ref_url="https://www.suse.com/security/cve/CVE-2014-8500" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0011-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0096-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0480-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0488-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1250-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00039.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8500/">CVE-2014-8500</cve>
	<bugzilla href="https://bugzilla.suse.com/908994">SUSE bug 908994</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8559</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8559" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8559" ref_url="https://www.suse.com/security/cve/CVE-2014-8559" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0178-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html" source="SUSE-SU"/>
    <description>
    The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of service (deadlock and system hang) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8559/">CVE-2014-8559</cve>
	<bugzilla href="https://bugzilla.suse.com/903640">SUSE bug 903640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915517">SUSE bug 915517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8561</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8561" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8561" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8561" ref_url="https://www.suse.com/security/cve/CVE-2014-8561" source="SUSE CVE"/>
    <description>
    imagemagick 6.8.9.6 has remote DOS via infinite loop
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-8561/">CVE-2014-8561</cve>
	<bugzilla href="https://bugzilla.suse.com/1156786">SUSE bug 1156786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8564</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8564" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8564" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8564" ref_url="https://www.suse.com/security/cve/CVE-2014-8564" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1472-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00084.html" source="SUSE-SU"/>
    <description>
    The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8564/">CVE-2014-8564</cve>
	<bugzilla href="https://bugzilla.suse.com/904603">SUSE bug 904603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481164" comment="gnutls-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481165" comment="libgnutls-devel-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481166" comment="libgnutls30-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481167" comment="libgnutls30-32bit-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481168" comment="libgnutlsxx-devel-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481169" comment="libgnutlsxx28-3.6.7-6.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8602</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8602" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8602" ref_url="https://www.suse.com/security/cve/CVE-2014-8602" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00085.html" source="SUSE-SU"/>
    <description>
    iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a large or infinite number of referrals.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8602/">CVE-2014-8602</cve>
	<bugzilla href="https://bugzilla.suse.com/908990">SUSE bug 908990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481525" comment="libunbound2-1.6.8-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481526" comment="unbound-anchor-1.6.8-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481527" comment="unbound-devel-1.6.8-8.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8634</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8634" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8634" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8634" ref_url="https://www.suse.com/security/cve/CVE-2014-8634" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0133-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8634/">CVE-2014-8634</cve>
	<bugzilla href="https://bugzilla.suse.com/913064">SUSE bug 913064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8635</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8635" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8635" ref_url="https://www.suse.com/security/cve/CVE-2014-8635" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0133-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8635/">CVE-2014-8635</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8636</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8636" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8636" ref_url="https://www.suse.com/security/cve/CVE-2014-8636" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8636/">CVE-2014-8636</cve>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913102">SUSE bug 913102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8637</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8637" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8637" ref_url="https://www.suse.com/security/cve/CVE-2014-8637" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8637/">CVE-2014-8637</cve>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913103">SUSE bug 913103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8638</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8638" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8638" ref_url="https://www.suse.com/security/cve/CVE-2014-8638" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0133-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 omits the CORS Origin header, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8638/">CVE-2014-8638</cve>
	<bugzilla href="https://bugzilla.suse.com/913068">SUSE bug 913068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8639</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8639" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8639" ref_url="https://www.suse.com/security/cve/CVE-2014-8639" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0133-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8639/">CVE-2014-8639</cve>
	<bugzilla href="https://bugzilla.suse.com/913066">SUSE bug 913066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8640</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8640" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8640" ref_url="https://www.suse.com/security/cve/CVE-2014-8640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service (uninitialized-memory read and application crash) via crafted API calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8640/">CVE-2014-8640</cve>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913104">SUSE bug 913104</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8641</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8641" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8641" ref_url="https://www.suse.com/security/cve/CVE-2014-8641" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, and SeaMonkey before 2.32 allows remote attackers to execute arbitrary code via crafted track data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8641/">CVE-2014-8641</cve>
	<bugzilla href="https://bugzilla.suse.com/913067">SUSE bug 913067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913096">SUSE bug 913096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8642</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8642" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8642" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8642" ref_url="https://www.suse.com/security/cve/CVE-2014-8642" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck extension in deciding whether to trust an OCSP responder, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which there was an incorrect decision to accept a compromised and revoked certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8642/">CVE-2014-8642</cve>
	<bugzilla href="https://bugzilla.suse.com/913222">SUSE bug 913222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8643</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8643" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8643" ref_url="https://www.suse.com/security/cve/CVE-2014-8643" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0077-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin's process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-18"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8643/">CVE-2014-8643</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8650</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8650" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8650" ref_url="https://www.suse.com/security/cve/CVE-2014-8650" source="SUSE CVE"/>
    <description>
    python-requests-Kerberos through 0.5 does not handle mutual authentication
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-8650/">CVE-2014-8650</cve>
	<bugzilla href="https://bugzilla.suse.com/1160886">SUSE bug 1160886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348231" comment="python3-requests-kerberos is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781772" comment="python2-requests-kerberos is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8680</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8680" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8680" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8680" ref_url="https://www.suse.com/security/cve/CVE-2014-8680" source="SUSE CVE"/>
    <description>
    The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8680/">CVE-2014-8680</cve>
	<bugzilla href="https://bugzilla.suse.com/908995">SUSE bug 908995</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335113" comment="bind-chrootenv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335115" comment="bind-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335114" comment="bind-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335112" comment="bind-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634659" comment="libbind9-1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634660" comment="libdns1605 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634661" comment="libirs-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634662" comment="libirs1601 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634663" comment="libisc1606 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634664" comment="libisccc1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634665" comment="libisccfg1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634666" comment="libns1604 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634667" comment="python3-bind is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8709</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8709" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8709" ref_url="https://www.suse.com/security/cve/CVE-2014-8709" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain sensitive cleartext information by reading packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8709/">CVE-2014-8709</cve>
	<bugzilla href="https://bugzilla.suse.com/904700">SUSE bug 904700</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8710</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8710" ref_url="https://www.suse.com/security/cve/CVE-2014-8710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00104.html" source="SUSE-SU"/>
    <description>
    The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before 1.10.11 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8710/">CVE-2014-8710</cve>
	<bugzilla href="https://bugzilla.suse.com/905246">SUSE bug 905246</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8711</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8711" ref_url="https://www.suse.com/security/cve/CVE-2014-8711" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00104.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service (application crash) via a crafted amqp_0_10 PDU in a packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8711/">CVE-2014-8711</cve>
	<bugzilla href="https://bugzilla.suse.com/905245">SUSE bug 905245</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8712</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8712" ref_url="https://www.suse.com/security/cve/CVE-2014-8712" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00104.html" source="SUSE-SU"/>
    <description>
    The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8712/">CVE-2014-8712</cve>
	<bugzilla href="https://bugzilla.suse.com/905248">SUSE bug 905248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8713</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8713" ref_url="https://www.suse.com/security/cve/CVE-2014-8713" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00104.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8713/">CVE-2014-8713</cve>
	<bugzilla href="https://bugzilla.suse.com/905248">SUSE bug 905248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8714</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8714" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8714" ref_url="https://www.suse.com/security/cve/CVE-2014-8714" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-November/001083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-11/msg00104.html" source="SUSE-SU"/>
    <description>
    The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8714/">CVE-2014-8714</cve>
	<bugzilla href="https://bugzilla.suse.com/905247">SUSE bug 905247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8767</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8767" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8767" ref_url="https://www.suse.com/security/cve/CVE-2014-8767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0284-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8767/">CVE-2014-8767</cve>
	<bugzilla href="https://bugzilla.suse.com/905870">SUSE bug 905870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905871">SUSE bug 905871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8768</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8768" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8768" ref_url="https://www.suse.com/security/cve/CVE-2014-8768" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0284-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8768/">CVE-2014-8768</cve>
	<bugzilla href="https://bugzilla.suse.com/905871">SUSE bug 905871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8769</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8769" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8769" ref_url="https://www.suse.com/security/cve/CVE-2014-8769" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0284-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8769/">CVE-2014-8769</cve>
	<bugzilla href="https://bugzilla.suse.com/905871">SUSE bug 905871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905872">SUSE bug 905872</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8884</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8884" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8884" ref_url="https://www.suse.com/security/cve/CVE-2014-8884" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00019.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_send_master_cmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel before 3.17.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via a large message length in an ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8884/">CVE-2014-8884</cve>
	<bugzilla href="https://bugzilla.suse.com/904876">SUSE bug 904876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905522">SUSE bug 905522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905739">SUSE bug 905739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905744">SUSE bug 905744</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905748">SUSE bug 905748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905764">SUSE bug 905764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148891" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8891</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8891" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8891" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8891" ref_url="https://www.suse.com/security/cve/CVE-2014-8891" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0343-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0344-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="TID7016228" ref_url="https://www.suse.com/support/kb/doc/?id=7016228" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code via unspecified vectors related to the security manager.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-8891/">CVE-2014-8891</cve>
	<bugzilla href="https://bugzilla.suse.com/916266">SUSE bug 916266</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148892" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8892</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8892" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8892" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8892" ref_url="https://www.suse.com/security/cve/CVE-2014-8892" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0343-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0344-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="TID7016228" ref_url="https://www.suse.com/support/kb/doc/?id=7016228" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to bypass intended access permissions and obtain sensitive information via unspecified vectors related to the security manager.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8892/">CVE-2014-8892</cve>
	<bugzilla href="https://bugzilla.suse.com/916265">SUSE bug 916265</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8962</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8962" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8962" ref_url="https://www.suse.com/security/cve/CVE-2014-8962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00034.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8962/">CVE-2014-8962</cve>
	<bugzilla href="https://bugzilla.suse.com/906831">SUSE bug 906831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/907764">SUSE bug 907764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969774">SUSE bug 969774</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481125" comment="flac-devel-1.3.2-3.3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481126" comment="libFLAC++6-1.3.2-3.3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481127" comment="libFLAC8-1.3.2-3.3.20 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8964</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8964" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8964" ref_url="https://www.suse.com/security/cve/CVE-2014-8964" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00076.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8964/">CVE-2014-8964</cve>
	<bugzilla href="https://bugzilla.suse.com/906574">SUSE bug 906574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924960">SUSE bug 924960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933288">SUSE bug 933288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936408">SUSE bug 936408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958373">SUSE bug 958373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480659" comment="libpcre16-0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480665" comment="libpcre2-16-0-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480666" comment="libpcre2-32-0-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480667" comment="libpcre2-8-0-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480660" comment="libpcrecpp0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480661" comment="libpcrecpp0-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480662" comment="libpcreposix0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480663" comment="pcre-devel-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480664" comment="pcre-tools-8.41-4.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482350" comment="libpcre2-posix2-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482351" comment="pcre2-devel-10.31-1.14 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8991</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-8991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8991" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-8991" ref_url="https://www.suse.com/security/cve/CVE-2014-8991" source="SUSE CVE"/>
    <description>
    pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8991/">CVE-2014-8991</cve>
	<bugzilla href="https://bugzilla.suse.com/907038">SUSE bug 907038</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480895" comment="python3-pip-10.0.1-1.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009656226" comment="python2-pip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659647" comment="python3-pip is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9028</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9028" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9028" ref_url="https://www.suse.com/security/cve/CVE-2014-9028" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00034.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9028/">CVE-2014-9028</cve>
	<bugzilla href="https://bugzilla.suse.com/907016">SUSE bug 907016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969774">SUSE bug 969774</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481125" comment="flac-devel-1.3.2-3.3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481126" comment="libFLAC++6-1.3.2-3.3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481127" comment="libFLAC8-1.3.2-3.3.20 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9029</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9029" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9029" ref_url="https://www.suse.com/security/cve/CVE-2014-9029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001206.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9029/">CVE-2014-9029</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/906364">SUSE bug 906364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909474">SUSE bug 909474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9087</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9087" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9087" ref_url="https://www.suse.com/security/cve/CVE-2014-9087" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001154.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1682-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00081.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-19"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9087/">CVE-2014-9087</cve>
	<bugzilla href="https://bugzilla.suse.com/907074">SUSE bug 907074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/926826">SUSE bug 926826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996084">SUSE bug 996084</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480596" comment="libksba-devel-1.3.5-2.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480597" comment="libksba8-1.3.5-2.14 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9092</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9092" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9092" ref_url="https://www.suse.com/security/cve/CVE-2014-9092" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0029-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001153.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1637-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00055.html" source="SUSE-SU"/>
    <description>
    libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9092/">CVE-2014-9092</cve>
	<bugzilla href="https://bugzilla.suse.com/906761">SUSE bug 906761</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486681" comment="libjpeg8-32bit-8.1.2-5.7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481410" comment="libjpeg62-62.2.0-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481411" comment="libjpeg62-devel-62.2.0-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481412" comment="libjpeg8-8.1.2-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481413" comment="libjpeg8-devel-8.1.2-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481414" comment="libturbojpeg0-8.1.2-5.7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9093</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9093" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9093" ref_url="https://www.suse.com/security/cve/CVE-2014-9093" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1727-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00109.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 4.3.5 allows remote attackers to cause a denial of service (invalid write operation and crash) and possibly execute arbitrary code via a crafted RTF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9093/">CVE-2014-9093</cve>
	<bugzilla href="https://bugzilla.suse.com/907636">SUSE bug 907636</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9112</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9112" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9112" ref_url="https://www.suse.com/security/cve/CVE-2014-9112" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1675-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1643-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00061.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9112/">CVE-2014-9112</cve>
	<bugzilla href="https://bugzilla.suse.com/907456">SUSE bug 907456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/913479">SUSE bug 913479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480145" comment="cpio-2.12-1.439 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480146" comment="cpio-lang-2.12-1.439 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480147" comment="cpio-mt-2.12-1.439 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9114</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9114" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9114" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9114" ref_url="https://www.suse.com/security/cve/CVE-2014-9114" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001313.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00035.html" source="SUSE-SU"/>
    <description>
    Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9114/">CVE-2014-9114</cve>
	<bugzilla href="https://bugzilla.suse.com/907434">SUSE bug 907434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/908742">SUSE bug 908742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488452" comment="uuidd-2.33.1-2.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481268" comment="libblkid-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481269" comment="libblkid-devel-static-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481270" comment="libblkid1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481271" comment="libblkid1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481272" comment="libfdisk-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481273" comment="libfdisk1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481274" comment="libmount-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481275" comment="libmount1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481276" comment="libmount1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481277" comment="libsmartcols-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481278" comment="libsmartcols1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481279" comment="libuuid-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481280" comment="libuuid-devel-static-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481281" comment="libuuid1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481282" comment="libuuid1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481283" comment="util-linux-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481284" comment="util-linux-lang-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481285" comment="util-linux-systemd-2.33.1-2.14 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9116</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9116" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9116" ref_url="https://www.suse.com/security/cve/CVE-2014-9116" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0758-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004327.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005432.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00018.html" source="SUSE-SU"/>
    <description>
    The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9116/">CVE-2014-9116</cve>
	<bugzilla href="https://bugzilla.suse.com/907453">SUSE bug 907453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782649" comment="mutt-1.10.1-3.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782650" comment="mutt-doc-1.10.1-3.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782651" comment="mutt-lang-1.10.1-3.3.4 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9130</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9130" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9130" ref_url="https://www.suse.com/security/cve/CVE-2014-9130" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1699-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1699-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0925-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0953-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001412.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1625-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0319-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html" source="SUSE-SU"/>
    <description>
    scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9130/">CVE-2014-9130</cve>
	<bugzilla href="https://bugzilla.suse.com/907809">SUSE bug 907809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911782">SUSE bug 911782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/921588">SUSE bug 921588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487702" comment="perl-YAML-LibYAML-0.59-1.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480828" comment="libyaml-0-2-0.1.7-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480829" comment="libyaml-devel-0.1.7-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9221</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9221" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9221" ref_url="https://www.suse.com/security/cve/CVE-2014-9221" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001221.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0114-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00054.html" source="SUSE-SU"/>
    <description>
    strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9221/">CVE-2014-9221</cve>
	<bugzilla href="https://bugzilla.suse.com/910491">SUSE bug 910491</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9293</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9293" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9293" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9293" ref_url="https://www.suse.com/security/cve/CVE-2014-9293" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0259-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0259-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00023.html" source="SUSE-SU"/>
    <description>
    The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9293/">CVE-2014-9293</cve>
	<bugzilla href="https://bugzilla.suse.com/910764">SUSE bug 910764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911053">SUSE bug 911053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911792">SUSE bug 911792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9294</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9294" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9294" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9294" ref_url="https://www.suse.com/security/cve/CVE-2014-9294" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0259-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0259-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00023.html" source="SUSE-SU"/>
    <description>
    util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9294/">CVE-2014-9294</cve>
	<bugzilla href="https://bugzilla.suse.com/910764">SUSE bug 910764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911053">SUSE bug 911053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911792">SUSE bug 911792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9295</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9295" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9295" ref_url="https://www.suse.com/security/cve/CVE-2014-9295" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1686-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1686-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="TID7016020" ref_url="https://www.suse.com/support/kb/doc?id=7016020" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1670-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00024.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9295/">CVE-2014-9295</cve>
	<bugzilla href="https://bugzilla.suse.com/910764">SUSE bug 910764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911792">SUSE bug 911792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916239">SUSE bug 916239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9296</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9296" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9296" ref_url="https://www.suse.com/security/cve/CVE-2014-9296" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1670-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00024.html" source="SUSE-SU"/>
    <description>
    The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger an unintended association change via crafted packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9296/">CVE-2014-9296</cve>
	<bugzilla href="https://bugzilla.suse.com/910764">SUSE bug 910764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911053">SUSE bug 911053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911792">SUSE bug 911792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9297</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9297" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9297" ref_url="https://www.suse.com/security/cve/CVE-2014-9297" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0259-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0259-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00023.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9750, CVE-2014-9751.  Reason: this ID was intended for one issue, but was associated with two issues.  Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9297/">CVE-2014-9297</cve>
	<bugzilla href="https://bugzilla.suse.com/911792">SUSE bug 911792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/948963">SUSE bug 948963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9298</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9298" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9298" ref_url="https://www.suse.com/security/cve/CVE-2014-9298" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0259-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0259-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00023.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9750, CVE-2014-9751.  Reason: this ID was intended for one issue, but was associated with two issues.  Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9298/">CVE-2014-9298</cve>
	<bugzilla href="https://bugzilla.suse.com/911792">SUSE bug 911792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/948963">SUSE bug 948963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9328</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9328" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9328" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9328" ref_url="https://www.suse.com/security/cve/CVE-2014-9328" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001226.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html" source="SUSE-SU"/>
    <description>
    ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9328/">CVE-2014-9328</cve>
	<bugzilla href="https://bugzilla.suse.com/1040662">SUSE bug 1040662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915512">SUSE bug 915512</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9356</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9356" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9356" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9356" ref_url="https://www.suse.com/security/cve/CVE-2014-9356" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001163.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00106.html" source="SUSE-SU"/>
    <description>
    Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image or (2) build in a Dockerfile.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-9356/">CVE-2014-9356</cve>
	<bugzilla href="https://bugzilla.suse.com/909712">SUSE bug 909712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909747">SUSE bug 909747</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149357" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9357</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9357" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9357" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9357" ref_url="https://www.suse.com/security/cve/CVE-2014-9357" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001163.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00106.html" source="SUSE-SU"/>
    <description>
    Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-9357/">CVE-2014-9357</cve>
	<bugzilla href="https://bugzilla.suse.com/909710">SUSE bug 909710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909747">SUSE bug 909747</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9358</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9358" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9358" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9358" ref_url="https://www.suse.com/security/cve/CVE-2014-9358" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001163.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00106.html" source="SUSE-SU"/>
    <description>
    Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9358/">CVE-2014-9358</cve>
	<bugzilla href="https://bugzilla.suse.com/909709">SUSE bug 909709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/909747">SUSE bug 909747</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9390</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9390" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9390" ref_url="https://www.suse.com/security/cve/CVE-2014-9390" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0154-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0154-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001180.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0673-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1096-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00045.html" source="SUSE-SU"/>
    <description>
    Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9390/">CVE-2014-9390</cve>
	<bugzilla href="https://bugzilla.suse.com/910756">SUSE bug 910756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925040">SUSE bug 925040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481138" comment="git-core-2.16.4-3.9.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487750" comment="git-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487751" comment="git-arch-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487752" comment="git-cvs-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487753" comment="git-daemon-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487754" comment="git-doc-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487755" comment="git-email-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487756" comment="git-gui-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487757" comment="git-svn-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487758" comment="git-web-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487759" comment="gitk-2.16.4-3.9.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9402</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9402" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9402" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9402" ref_url="https://www.suse.com/security/cve/CVE-2014-9402" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001305.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0351-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html" source="SUSE-SU"/>
    <description>
    The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9402/">CVE-2014-9402</cve>
	<bugzilla href="https://bugzilla.suse.com/910599">SUSE bug 910599</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9419</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9419" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9419" ref_url="https://www.suse.com/security/cve/CVE-2014-9419" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9419/">CVE-2014-9419</cve>
	<bugzilla href="https://bugzilla.suse.com/911326">SUSE bug 911326</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9420</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9420" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9420" ref_url="https://www.suse.com/security/cve/CVE-2014-9420" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0178-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html" source="SUSE-SU"/>
    <description>
    The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9420/">CVE-2014-9420</cve>
	<bugzilla href="https://bugzilla.suse.com/906545">SUSE bug 906545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911325">SUSE bug 911325</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9421</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9421" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9421" ref_url="https://www.suse.com/security/cve/CVE-2014-9421" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html" source="SUSE-SU"/>
    <description>
    The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly handle partial XDR deserialization, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via malformed XDR data, as demonstrated by data sent to kadmind.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9421/">CVE-2014-9421</cve>
	<bugzilla href="https://bugzilla.suse.com/1005509">SUSE bug 1005509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912002">SUSE bug 912002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9422</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9422" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9422" ref_url="https://www.suse.com/security/cve/CVE-2014-9422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html" source="SUSE-SU"/>
    <description>
    The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9422/">CVE-2014-9422</cve>
	<bugzilla href="https://bugzilla.suse.com/1005509">SUSE bug 1005509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912002">SUSE bug 912002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9423</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9423" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9423" ref_url="https://www.suse.com/security/cve/CVE-2014-9423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0290-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00044.html" source="SUSE-SU"/>
    <description>
    The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9423/">CVE-2014-9423</cve>
	<bugzilla href="https://bugzilla.suse.com/1005509">SUSE bug 1005509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912002">SUSE bug 912002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9447</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9447" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9447" ref_url="https://www.suse.com/security/cve/CVE-2014-9447" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001227.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001269.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0123-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00063.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9447/">CVE-2014-9447</cve>
	<bugzilla href="https://bugzilla.suse.com/911662">SUSE bug 911662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912408">SUSE bug 912408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480205" comment="elfutils-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480206" comment="elfutils-lang-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480207" comment="libasm-devel-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480208" comment="libasm1-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480209" comment="libdw-devel-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480210" comment="libdw1-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480211" comment="libdw1-32bit-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480212" comment="libebl-devel-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480213" comment="libebl-plugins-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480214" comment="libebl-plugins-32bit-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480215" comment="libelf-devel-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480216" comment="libelf1-0.168-2.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480217" comment="libelf1-32bit-0.168-2.164 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9449</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9449" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9449" ref_url="https://www.suse.com/security/cve/CVE-2014-9449" source="SUSE CVE"/>
    <description>
    Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9449/">CVE-2014-9449</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486675" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486676" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9474</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9474" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9474" ref_url="https://www.suse.com/security/cve/CVE-2014-9474" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001208.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpn_set_str.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9474/">CVE-2014-9474</cve>
	<bugzilla href="https://bugzilla.suse.com/911812">SUSE bug 911812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480620" comment="libmpfr6-4.0.1-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480621" comment="mpfr-devel-4.0.1-1.46 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9483</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9483" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9483" ref_url="https://www.suse.com/security/cve/CVE-2014-9483" source="SUSE CVE"/>
    <description>
    Emacs 24.4 allows remote attackers to bypass security restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<cve href="https://www.suse.com/security/cve/CVE-2014-9483/">CVE-2014-9483</cve>
	<bugzilla href="https://bugzilla.suse.com/912872">SUSE bug 912872</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486596" comment="emacs-x11-25.3-3.3.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481111" comment="emacs-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481112" comment="emacs-el-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481113" comment="emacs-info-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481114" comment="emacs-nox-25.3-3.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481115" comment="etags-25.3-3.3.18 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9488</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9488" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9488" ref_url="https://www.suse.com/security/cve/CVE-2014-9488" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007445.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0595-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00077.html" source="SUSE-SU"/>
    <description>
    The is_utf8_well_formed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-9488/">CVE-2014-9488</cve>
	<bugzilla href="https://bugzilla.suse.com/921719">SUSE bug 921719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480353" comment="less-530-1.6 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9495</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9495" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9495" ref_url="https://www.suse.com/security/cve/CVE-2014-9495" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="TID7016082" ref_url="https://www.suse.com/support/kb/doc/?id=7016082" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-9495/">CVE-2014-9495</cve>
	<bugzilla href="https://bugzilla.suse.com/912076">SUSE bug 912076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912929">SUSE bug 912929</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9496</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9496" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9496" ref_url="https://www.suse.com/security/cve/CVE-2014-9496" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0169-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001193.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0041-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00016.html" source="SUSE-SU"/>
    <description>
    The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9496/">CVE-2014-9496</cve>
	<bugzilla href="https://bugzilla.suse.com/911796">SUSE bug 911796</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481480" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9512</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9512" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9512" ref_url="https://www.suse.com/security/cve/CVE-2014-9512" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001813.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1866-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002164.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002227.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1671-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1695-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00044.html" source="SUSE-SU"/>
    <description>
    rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9512/">CVE-2014-9512</cve>
	<bugzilla href="https://bugzilla.suse.com/915410">SUSE bug 915410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960191">SUSE bug 960191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480919" comment="rsync-3.1.3-2.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9556</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9556" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9556" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9556" ref_url="https://www.suse.com/security/cve/CVE-2014-9556" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001290.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2131-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001703.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0187-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0449-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9556/">CVE-2014-9556</cve>
	<bugzilla href="https://bugzilla.suse.com/912214">SUSE bug 912214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919283">SUSE bug 919283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934533">SUSE bug 934533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481437" comment="libmspack-devel-0.6-3.3.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481438" comment="libmspack0-0.6-3.3.11 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9584</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9584" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9584" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9584" ref_url="https://www.suse.com/security/cve/CVE-2014-9584" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html" source="SUSE-SU"/>
    <description>
    The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local users to obtain sensitive information from kernel memory via a crafted iso9660 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9584/">CVE-2014-9584</cve>
	<bugzilla href="https://bugzilla.suse.com/912654">SUSE bug 912654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9585</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9585" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9585" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9585" ref_url="https://www.suse.com/security/cve/CVE-2014-9585" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0178-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html" source="SUSE-SU"/>
    <description>
    The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9585/">CVE-2014-9585</cve>
	<bugzilla href="https://bugzilla.suse.com/912705">SUSE bug 912705</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9636</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9636" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9636" ref_url="https://www.suse.com/security/cve/CVE-2014-9636" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004241.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00013.html" source="SUSE-SU"/>
    <description>
    unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9636/">CVE-2014-9636</cve>
	<bugzilla href="https://bugzilla.suse.com/914442">SUSE bug 914442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674336" comment="unzip-6.00-4.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9638</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9638" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9638" ref_url="https://www.suse.com/security/cve/CVE-2014-9638" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001634.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0522-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00054.html" source="SUSE-SU"/>
    <description>
    oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9638/">CVE-2014-9638</cve>
	<bugzilla href="https://bugzilla.suse.com/914439">SUSE bug 914439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914441">SUSE bug 914441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486554" comment="vorbis-tools-1.4.0-1.53 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486555" comment="vorbis-tools-lang-1.4.0-1.53 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9639</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9639" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9639" ref_url="https://www.suse.com/security/cve/CVE-2014-9639" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001634.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0522-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00054.html" source="SUSE-SU"/>
    <description>
    Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9639/">CVE-2014-9639</cve>
	<bugzilla href="https://bugzilla.suse.com/1081744">SUSE bug 1081744</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914439">SUSE bug 914439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914441">SUSE bug 914441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486554" comment="vorbis-tools-1.4.0-1.53 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486555" comment="vorbis-tools-lang-1.4.0-1.53 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9640</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9640" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9640" ref_url="https://www.suse.com/security/cve/CVE-2014-9640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001250.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0231-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00032.html" source="SUSE-SU"/>
    <description>
    oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9640/">CVE-2014-9640</cve>
	<bugzilla href="https://bugzilla.suse.com/912214">SUSE bug 912214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914938">SUSE bug 914938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919283">SUSE bug 919283</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486554" comment="vorbis-tools-1.4.0-1.53 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486555" comment="vorbis-tools-lang-1.4.0-1.53 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9645</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9645" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9645" ref_url="https://www.suse.com/security/cve/CVE-2014-9645" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1445-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013133.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4371-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013204.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1083-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00041.html" source="SUSE-SU"/>
    <description>
    The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an "ifconfig /usbserial up" command or a "mount -t /snd_pcm none /" command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2023-02-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-9645/">CVE-2014-9645</cve>
	<bugzilla href="https://bugzilla.suse.com/914423">SUSE bug 914423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914660">SUSE bug 914660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725896" comment="busybox-1.35.0-150000.4.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009725897" comment="busybox-static-1.35.0-150000.4.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725910" comment="busybox-1.35.0-150000.4.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009725912" comment="busybox-static-1.35.0-150000.4.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725918" comment="busybox-1.35.0-150000.4.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009725919" comment="busybox-static-1.35.0-150000.4.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725931" comment="busybox-1.35.0-150000.4.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009725932" comment="busybox-static-1.35.0-150000.4.14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9655</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9655" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9655" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9655" ref_url="https://www.suse.com/security/cve/CVE-2014-9655" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001546.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001561.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1213-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00019.html" source="SUSE-SU"/>
    <description>
    The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9655/">CVE-2014-9655</cve>
	<bugzilla href="https://bugzilla.suse.com/1206220">SUSE bug 1206220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914890">SUSE bug 914890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916925">SUSE bug 916925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916927">SUSE bug 916927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969783">SUSE bug 969783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149656" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9656</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9656" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9656" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9656" ref_url="https://www.suse.com/security/cve/CVE-2014-9656" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted OpenType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9656/">CVE-2014-9656</cve>
	<bugzilla href="https://bugzilla.suse.com/916847">SUSE bug 916847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9657</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9657" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9657" ref_url="https://www.suse.com/security/cve/CVE-2014-9657" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021836" ref_url="https://www.suse.com/support/kb/doc/?id=7021836" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9657/">CVE-2014-9657</cve>
	<bugzilla href="https://bugzilla.suse.com/916856">SUSE bug 916856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9658</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9658" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9658" ref_url="https://www.suse.com/security/cve/CVE-2014-9658" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021836" ref_url="https://www.suse.com/support/kb/doc/?id=7021836" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9658/">CVE-2014-9658</cve>
	<bugzilla href="https://bugzilla.suse.com/916857">SUSE bug 916857</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9659</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9659" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9659" ref_url="https://www.suse.com/security/cve/CVE-2014-9659" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2240.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9659/">CVE-2014-9659</cve>
	<bugzilla href="https://bugzilla.suse.com/916867">SUSE bug 916867</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9660</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9660" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9660" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9660" ref_url="https://www.suse.com/security/cve/CVE-2014-9660" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9660/">CVE-2014-9660</cve>
	<bugzilla href="https://bugzilla.suse.com/916858">SUSE bug 916858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9661</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9661" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9661" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9661" ref_url="https://www.suse.com/security/cve/CVE-2014-9661" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9661/">CVE-2014-9661</cve>
	<bugzilla href="https://bugzilla.suse.com/916859">SUSE bug 916859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9662</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9662" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9662" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9662" ref_url="https://www.suse.com/security/cve/CVE-2014-9662" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    cff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation functions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted OTF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9662/">CVE-2014-9662</cve>
	<bugzilla href="https://bugzilla.suse.com/916860">SUSE bug 916860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9663</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9663" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9663" ref_url="https://www.suse.com/security/cve/CVE-2014-9663" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted cmap SFNT table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9663/">CVE-2014-9663</cve>
	<bugzilla href="https://bugzilla.suse.com/916865">SUSE bug 916865</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9664</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9664" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9664" ref_url="https://www.suse.com/security/cve/CVE-2014-9664" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted Type42 font, related to type42/t42parse.c and type1/t1load.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9664/">CVE-2014-9664</cve>
	<bugzilla href="https://bugzilla.suse.com/916864">SUSE bug 916864</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9665</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9665" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9665" ref_url="https://www.suse.com/security/cve/CVE-2014-9665" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact by embedding a PNG file in a .ttf font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9665/">CVE-2014-9665</cve>
	<bugzilla href="https://bugzilla.suse.com/916863">SUSE bug 916863</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9666</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9666" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9666" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9666" ref_url="https://www.suse.com/security/cve/CVE-2014-9666" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted embedded bitmap.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9666/">CVE-2014-9666</cve>
	<bugzilla href="https://bugzilla.suse.com/916862">SUSE bug 916862</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9667</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9667" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9667" ref_url="https://www.suse.com/security/cve/CVE-2014-9667" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9667/">CVE-2014-9667</cve>
	<bugzilla href="https://bugzilla.suse.com/916861">SUSE bug 916861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9668</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9668" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9668" ref_url="https://www.suse.com/security/cve/CVE-2014-9668" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting length values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Web Open Font Format (WOFF) file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9668/">CVE-2014-9668</cve>
	<bugzilla href="https://bugzilla.suse.com/916868">SUSE bug 916868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9669</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9669" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9669" ref_url="https://www.suse.com/security/cve/CVE-2014-9669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9669/">CVE-2014-9669</cve>
	<bugzilla href="https://bugzilla.suse.com/916870">SUSE bug 916870</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9670</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9670" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9670" ref_url="https://www.suse.com/security/cve/CVE-2014-9670" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9670/">CVE-2014-9670</cve>
	<bugzilla href="https://bugzilla.suse.com/916871">SUSE bug 916871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933247">SUSE bug 933247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9671</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9671" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9671" ref_url="https://www.suse.com/security/cve/CVE-2014-9671" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incremented.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9671/">CVE-2014-9671</cve>
	<bugzilla href="https://bugzilla.suse.com/916872">SUSE bug 916872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933247">SUSE bug 933247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9672</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9672" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9672" ref_url="https://www.suse.com/security/cve/CVE-2014-9672" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9672/">CVE-2014-9672</cve>
	<bugzilla href="https://bugzilla.suse.com/916873">SUSE bug 916873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9673</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9673" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9673" ref_url="https://www.suse.com/security/cve/CVE-2014-9673" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9673/">CVE-2014-9673</cve>
	<bugzilla href="https://bugzilla.suse.com/916874">SUSE bug 916874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9674</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9674" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9674" ref_url="https://www.suse.com/security/cve/CVE-2014-9674" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9674/">CVE-2014-9674</cve>
	<bugzilla href="https://bugzilla.suse.com/916879">SUSE bug 916879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9675</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9675" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9675" ref_url="https://www.suse.com/security/cve/CVE-2014-9675" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0627-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html" source="SUSE-SU"/>
    <description>
    bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9675/">CVE-2014-9675</cve>
	<bugzilla href="https://bugzilla.suse.com/916881">SUSE bug 916881</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9680</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9680" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9680" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9680" ref_url="https://www.suse.com/security/cve/CVE-2014-9680" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001420.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002420.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1849-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1913-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2983-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3004-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, discarding kernel-log messages, or repositioning tape drives.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-18"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9680/">CVE-2014-9680</cve>
	<bugzilla href="https://bugzilla.suse.com/917806">SUSE bug 917806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919737">SUSE bug 919737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/921999">SUSE bug 921999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953359">SUSE bug 953359</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659701" comment="sudo-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481659" comment="sudo-1.8.22-4.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481660" comment="sudo-devel-1.8.22-4.3.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9687</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9687" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9687" ref_url="https://www.suse.com/security/cve/CVE-2014-9687" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001837.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0291-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00118.html" source="SUSE-SU"/>
    <description>
    eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9687/">CVE-2014-9687</cve>
	<bugzilla href="https://bugzilla.suse.com/920160">SUSE bug 920160</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480202" comment="ecryptfs-utils-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480203" comment="ecryptfs-utils-devel-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480204" comment="libecryptfs1-111-2.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9710</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9710" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9710" ref_url="https://www.suse.com/security/cve/CVE-2014-9710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005579.html" source="SUSE-SU"/>
    <description>
    The Btrfs implementation in the Linux kernel before 3.19 does not ensure that the visible xattr state is consistent with a requested replacement, which allows local users to bypass intended ACL settings and gain privileges via standard filesystem operations (1) during an xattr-replacement time window, related to a race condition, or (2) after an xattr-replacement attempt that fails because the data does not fit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9710/">CVE-2014-9710</cve>
	<bugzilla href="https://bugzilla.suse.com/923908">SUSE bug 923908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939260">SUSE bug 939260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9717</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9717" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9717" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9717" ref_url="https://www.suse.com/security/cve/CVE-2014-9717" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
    <description>
    fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which allows local users to bypass intended access restrictions and navigate to filesystem locations beneath a mount by calling umount2 within a user namespace.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-04-20"/>
	<updated date="2023-04-20"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9717/">CVE-2014-9717</cve>
	<bugzilla href="https://bugzilla.suse.com/928547">SUSE bug 928547</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9721</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9721" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9721" ref_url="https://www.suse.com/security/cve/CVE-2014-9721" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001578.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1028-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-9721/">CVE-2014-9721</cve>
	<bugzilla href="https://bugzilla.suse.com/931978">SUSE bug 931978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481590" comment="libzmq5-4.2.3-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481591" comment="zeromq-devel-4.2.3-3.3.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9728</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9728" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9728" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9728" ref_url="https://www.suse.com/security/cve/CVE-2014-9728" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001611.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The UDF filesystem implementation in the Linux kernel before 3.18.2 does not validate certain lengths, which allows local users to cause a denial of service (buffer over-read and system crash) via a crafted filesystem image, related to fs/udf/inode.c and fs/udf/symlink.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9728/">CVE-2014-9728</cve>
	<bugzilla href="https://bugzilla.suse.com/911325">SUSE bug 911325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933904">SUSE bug 933904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9729</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9729" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9729" ref_url="https://www.suse.com/security/cve/CVE-2014-9729" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001611.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.18.2 does not ensure a certain data-structure size consistency, which allows local users to cause a denial of service (system crash) via a crafted UDF filesystem image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9729/">CVE-2014-9729</cve>
	<bugzilla href="https://bugzilla.suse.com/911325">SUSE bug 911325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933904">SUSE bug 933904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9730</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9730" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9730" ref_url="https://www.suse.com/security/cve/CVE-2014-9730" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001611.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The udf_pc_to_char function in fs/udf/symlink.c in the Linux kernel before 3.18.2 relies on component lengths that are unused, which allows local users to cause a denial of service (system crash) via a crafted UDF filesystem image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9730/">CVE-2014-9730</cve>
	<bugzilla href="https://bugzilla.suse.com/911325">SUSE bug 911325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933904">SUSE bug 933904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9731</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9731" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9731" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9731" ref_url="https://www.suse.com/security/cve/CVE-2014-9731" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001611.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The UDF filesystem implementation in the Linux kernel before 3.18.2 does not ensure that space is available for storing a symlink target's name along with a trailing \0 character, which allows local users to obtain sensitive information via a crafted filesystem image, related to fs/udf/symlink.c and fs/udf/unicode.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9731/">CVE-2014-9731</cve>
	<bugzilla href="https://bugzilla.suse.com/911325">SUSE bug 911325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933896">SUSE bug 933896</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9749</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9749" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9749" ref_url="https://www.suse.com/security/cve/CVE-2014-9749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1983-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0128-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002562.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1835-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1835-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0192-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0223-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00124.html" source="SUSE-SU"/>
    <description>
    Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka "Nonce replay vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9749/">CVE-2014-9749</cve>
	<bugzilla href="https://bugzilla.suse.com/949942">SUSE bug 949942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/993299">SUSE bug 993299</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333991" comment="squid is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334168" comment="squid is affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9756</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9756" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9756" ref_url="https://www.suse.com/security/cve/CVE-2014-9756" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1979-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2000-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1995-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2119-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00145.html" source="SUSE-SU"/>
    <description>
    The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors related to the headindex variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9756/">CVE-2014-9756</cve>
	<bugzilla href="https://bugzilla.suse.com/953516">SUSE bug 953516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953519">SUSE bug 953519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953521">SUSE bug 953521</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481480" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9761</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9761" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9761" ref_url="https://www.suse.com/security/cve/CVE-2014-9761" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID7017287" ref_url="https://www.suse.com/support/kb/doc?id=7017287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9761/">CVE-2014-9761</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962738">SUSE bug 962738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986086">SUSE bug 986086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9766</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9766" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9766" ref_url="https://www.suse.com/security/cve/CVE-2014-9766" source="SUSE CVE"/>
    <description>
    Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9766/">CVE-2014-9766</cve>
	<bugzilla href="https://bugzilla.suse.com/968090">SUSE bug 968090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337724" comment="libpixman-1-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337940" comment="libpixman-1-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655956" comment="libpixman-1-0-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9821</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9821" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9821" ref_url="https://www.suse.com/security/cve/CVE-2014-9821" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1784-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9821/">CVE-2014-9821</cve>
	<bugzilla href="https://bugzilla.suse.com/982969">SUSE bug 982969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984014">SUSE bug 984014</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9841</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9841" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9841" ref_url="https://www.suse.com/security/cve/CVE-2014-9841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1784-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9841/">CVE-2014-9841</cve>
	<bugzilla href="https://bugzilla.suse.com/982969">SUSE bug 982969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984172">SUSE bug 984172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984186">SUSE bug 984186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984374">SUSE bug 984374</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9843</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9843" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9843" ref_url="https://www.suse.com/security/cve/CVE-2014-9843" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1784-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9843/">CVE-2014-9843</cve>
	<bugzilla href="https://bugzilla.suse.com/1000697">SUSE bug 1000697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982969">SUSE bug 982969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984179">SUSE bug 984179</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9862</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9862" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9862" ref_url="https://www.suse.com/security/cve/CVE-2014-9862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3094-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012442.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012445.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012590.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1977-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00026.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-10-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9862/">CVE-2014-9862</cve>
	<bugzilla href="https://bugzilla.suse.com/1173974">SUSE bug 1173974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201770">SUSE bug 1201770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990660">SUSE bug 990660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009709749" comment="libostree-2018.9-150100.7.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009709750" comment="libostree-1-1-2018.9-150100.7.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009709751" comment="libostree-devel-2018.9-150100.7.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009709752" comment="typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009709757" comment="libostree-2018.9-150100.7.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009709758" comment="libostree-1-1-2018.9-150100.7.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009709759" comment="libostree-devel-2018.9-150100.7.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009709760" comment="typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009709773" comment="libostree-2018.9-150100.7.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009709774" comment="libostree-1-1-2018.9-150100.7.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009709775" comment="libostree-devel-2018.9-150100.7.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009709776" comment="typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009716009" comment="libostree-2018.9-150100.7.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009716010" comment="libostree-1-1-2018.9-150100.7.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009716011" comment="libostree-devel-2018.9-150100.7.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009716012" comment="typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9904</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9904" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9904" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9904" ref_url="https://www.suse.com/security/cve/CVE-2014-9904" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html" source="SUSE-SU"/>
    <description>
    The snd_compress_check_input function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.17 does not properly check for an integer overflow, which allows local users to cause a denial of service (insufficient memory allocation) or possibly have unspecified other impact via a crafted SNDRV_COMPRESS_SET_PARAMS ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9904/">CVE-2014-9904</cve>
	<bugzilla href="https://bugzilla.suse.com/986811">SUSE bug 986811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986941">SUSE bug 986941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9913</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9913" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9913" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9913" ref_url="https://www.suse.com/security/cve/CVE-2014-9913" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00013.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-9913/">CVE-2014-9913</cve>
	<bugzilla href="https://bugzilla.suse.com/1013993">SUSE bug 1013993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159417">SUSE bug 1159417</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149914" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9914</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9914" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9914" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9914" ref_url="https://www.suse.com/security/cve/CVE-2014-9914" source="SUSE CVE"/>
    <description>
    Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect expectations about locking during multithreaded access to internal data structures for IPv4 UDP sockets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9914/">CVE-2014-9914</cve>
	<bugzilla href="https://bugzilla.suse.com/1023997">SUSE bug 1023997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9922</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9922" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9922" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9922" ref_url="https://www.suse.com/security/cve/CVE-2014-9922" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2342-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00017.html" source="SUSE-SU"/>
    <description>
    The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9922/">CVE-2014-9922</cve>
	<bugzilla href="https://bugzilla.suse.com/1032340">SUSE bug 1032340</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9939</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2014-9939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9939" source="CVE"/>
    <reference ref_id="SUSE CVE-2014-9939" ref_url="https://www.suse.com/security/cve/CVE-2014-9939" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9939/">CVE-2014-9939</cve>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105209">SUSE bug 1105209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0202</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0202" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0202" ref_url="https://www.suse.com/security/cve/CVE-2015-0202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0672-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00008.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory consumption) via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0202/">CVE-2015-0202</cve>
	<bugzilla href="https://bugzilla.suse.com/923793">SUSE bug 923793</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0204</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0204" ref_url="https://www.suse.com/security/cve/CVE-2015-0204" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7014420" ref_url="https://www.suse.com/support/kb/doc/?id=7014420" source="SUSE-SU"/>
		<reference ref_id="TID7016252" ref_url="https://www.suse.com/support/kb/doc?id=7016252" source="SUSE-SU"/>
		<reference ref_id="TID7016260" ref_url="https://www.suse.com/support/kb/doc/?id=7016260" source="SUSE-SU"/>
		<reference ref_id="TID7016273" ref_url="https://www.suse.com/support/kb/doc/?id=7016273" source="SUSE-SU"/>
		<reference ref_id="TID7016312" ref_url="https://www.suse.com/support/kb/doc/?id=7016312" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="TID7016340" ref_url="https://www.suse.com/support/kb/doc/?id=7016340" source="SUSE-SU"/>
		<reference ref_id="TID7016875" ref_url="https://www.suse.com/support/kb/doc/?id=7016875" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021435" ref_url="https://www.suse.com/support/kb/doc/?id=7021435" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021714" ref_url="https://www.suse.com/support/kb/doc/?id=7021714" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021863" ref_url="https://www.suse.com/support/kb/doc/?id=7021863" source="SUSE-SU"/>
		<reference ref_id="TID7021977" ref_url="https://www.suse.com/support/kb/doc/?id=7021977" source="SUSE-SU"/>
		<reference ref_id="TID7021993" ref_url="https://www.suse.com/support/kb/doc/?id=7021993" source="SUSE-SU"/>
		<reference ref_id="TID7021994" ref_url="https://www.suse.com/support/kb/doc/?id=7021994" source="SUSE-SU"/>
		<reference ref_id="TID7021995" ref_url="https://www.suse.com/support/kb/doc/?id=7021995" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue.  NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0204/">CVE-2015-0204</cve>
	<bugzilla href="https://bugzilla.suse.com/912014">SUSE bug 912014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920482">SUSE bug 920482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920484">SUSE bug 920484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927591">SUSE bug 927591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936787">SUSE bug 936787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952088">SUSE bug 952088</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0205</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0205" ref_url="https://www.suse.com/security/cve/CVE-2015-0205" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001190.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0172-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001201.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0182-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
    <description>
    The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0205/">CVE-2015-0205</cve>
	<bugzilla href="https://bugzilla.suse.com/912293">SUSE bug 912293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915848">SUSE bug 915848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0206</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0206" ref_url="https://www.suse.com/security/cve/CVE-2015-0206" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-January/001202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001205.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
    <description>
    Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0206/">CVE-2015-0206</cve>
	<bugzilla href="https://bugzilla.suse.com/912292">SUSE bug 912292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927623">SUSE bug 927623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0209</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0209" ref_url="https://www.suse.com/security/cve/CVE-2015-0209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0554-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0209/">CVE-2015-0209</cve>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0228</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0228" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0228" ref_url="https://www.suse.com/security/cve/CVE-2015-0228" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001415.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0418-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00006.html" source="SUSE-SU"/>
    <description>
    The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0228/">CVE-2015-0228</cve>
	<bugzilla href="https://bugzilla.suse.com/918352">SUSE bug 918352</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0236</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0236" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0236" ref_url="https://www.suse.com/security/cve/CVE-2015-0236" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0304-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001840.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0225-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00028.html" source="SUSE-SU"/>
    <description>
    libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0236/">CVE-2015-0236</cve>
	<bugzilla href="https://bugzilla.suse.com/914693">SUSE bug 914693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481528" comment="libvirt-libs-5.1.0-6.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488366" comment="libvirt-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488367" comment="libvirt-admin-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488368" comment="libvirt-bash-completion-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488369" comment="libvirt-client-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488370" comment="libvirt-daemon-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488371" comment="libvirt-daemon-config-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488372" comment="libvirt-daemon-config-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488373" comment="libvirt-daemon-driver-interface-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488374" comment="libvirt-daemon-driver-libxl-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488375" comment="libvirt-daemon-driver-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488376" comment="libvirt-daemon-driver-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488377" comment="libvirt-daemon-driver-nodedev-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488378" comment="libvirt-daemon-driver-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488379" comment="libvirt-daemon-driver-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488380" comment="libvirt-daemon-driver-secret-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488381" comment="libvirt-daemon-driver-storage-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488382" comment="libvirt-daemon-driver-storage-core-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488383" comment="libvirt-daemon-driver-storage-disk-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488384" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488385" comment="libvirt-daemon-driver-storage-logical-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488386" comment="libvirt-daemon-driver-storage-mpath-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488387" comment="libvirt-daemon-driver-storage-rbd-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488388" comment="libvirt-daemon-driver-storage-scsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488389" comment="libvirt-daemon-hooks-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488390" comment="libvirt-daemon-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488391" comment="libvirt-daemon-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488392" comment="libvirt-daemon-xen-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488393" comment="libvirt-devel-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488394" comment="libvirt-doc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488395" comment="libvirt-lock-sanlock-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488396" comment="libvirt-nss-5.1.0-6.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0239</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0239" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0239" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0239" ref_url="https://www.suse.com/security/cve/CVE-2015-0239" source="SUSE CVE"/>
    <description>
    The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to gain guest OS privileges or cause a denial of service (guest OS crash) by triggering use of a 16-bit code segment for emulation of a SYSENTER instruction.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0239/">CVE-2015-0239</cve>
	<bugzilla href="https://bugzilla.suse.com/987709">SUSE bug 987709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994618">SUSE bug 994618</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0240</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0240" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0240" ref_url="https://www.suse.com/security/cve/CVE-2015-0240" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0353-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0371-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="TID7014420" ref_url="https://www.suse.com/support/kb/doc/?id=7014420" source="SUSE-SU"/>
		<reference ref_id="TID7016875" ref_url="https://www.suse.com/support/kb/doc/?id=7016875" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0240/">CVE-2015-0240</cve>
	<bugzilla href="https://bugzilla.suse.com/917376">SUSE bug 917376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0245</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0245" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0245" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0245" ref_url="https://www.suse.com/security/cve/CVE-2015-0245" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0300-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2736-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00017.html" source="SUSE-SU"/>
    <description>
    D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0245/">CVE-2015-0245</cve>
	<bugzilla href="https://bugzilla.suse.com/1003898">SUSE bug 1003898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916343">SUSE bug 916343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481093" comment="dbus-1-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481094" comment="dbus-1-devel-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481095" comment="dbus-1-x11-1.12.2-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481096" comment="libdbus-1-3-1.12.2-6.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481097" comment="libdbus-1-3-32bit-1.12.2-6.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0247</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0247" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0247" ref_url="https://www.suse.com/security/cve/CVE-2015-0247" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001530.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004281.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00050.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2015-0247/">CVE-2015-0247</cve>
	<bugzilla href="https://bugzilla.suse.com/1123790">SUSE bug 1123790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915402">SUSE bug 915402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/918346">SUSE bug 918346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009674347" comment="e2fsprogs-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782652" comment="e2fsprogs-devel-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782653" comment="libcom_err-devel-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782654" comment="libcom_err-devel-static-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674348" comment="libcom_err2-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782655" comment="libcom_err2-32bit-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782656" comment="libext2fs-devel-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782657" comment="libext2fs-devel-static-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674349" comment="libext2fs2-1.43.8-4.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0248</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0248" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0248" ref_url="https://www.suse.com/security/cve/CVE-2015-0248" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0709-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0672-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00008.html" source="SUSE-SU"/>
    <description>
    The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0248/">CVE-2015-0248</cve>
	<bugzilla href="https://bugzilla.suse.com/923794">SUSE bug 923794</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0251</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0251" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0251" ref_url="https://www.suse.com/security/cve/CVE-2015-0251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0709-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001347.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0672-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00008.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0251/">CVE-2015-0251</cve>
	<bugzilla href="https://bugzilla.suse.com/923795">SUSE bug 923795</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0253</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0253" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0253" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0253" ref_url="https://www.suse.com/security/cve/CVE-2015-0253" source="SUSE CVE"/>
    <description>
    The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0253/">CVE-2015-0253</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0255</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0255" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0255" ref_url="https://www.suse.com/security/cve/CVE-2015-0255" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001262.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0399-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001263.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0400-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001261.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001268.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0939-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001403.html" source="SUSE-SU"/>
		<reference ref_id="TID7016170" ref_url="https://www.suse.com/support/kb/doc/?id=7016170" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0337-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0338-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00086.html" source="SUSE-SU"/>
    <description>
    X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0255/">CVE-2015-0255</cve>
	<bugzilla href="https://bugzilla.suse.com/915810">SUSE bug 915810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486659" comment="libXvnc-devel-1.9.0-17.32 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481261" comment="libXvnc1-1.9.0-17.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481262" comment="tigervnc-1.9.0-17.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481263" comment="xorg-x11-Xvnc-1.9.0-17.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481264" comment="xorg-x11-Xvnc-module-1.9.0-17.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481265" comment="xorg-x11-Xvnc-novnc-1.9.0-17.32 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0261</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0261" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0261" ref_url="https://www.suse.com/security/cve/CVE-2015-0261" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0616-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0261/">CVE-2015-0261</cve>
	<bugzilla href="https://bugzilla.suse.com/922220">SUSE bug 922220</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0274</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0274" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0274" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0274" ref_url="https://www.suse.com/security/cve/CVE-2015-0274" source="SUSE CVE"/>
    <description>
    The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0274/">CVE-2015-0274</cve>
	<bugzilla href="https://bugzilla.suse.com/919655">SUSE bug 919655</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0275</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0275" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0275" ref_url="https://www.suse.com/security/cve/CVE-2015-0275" source="SUSE CVE"/>
    <description>
    The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0275/">CVE-2015-0275</cve>
	<bugzilla href="https://bugzilla.suse.com/919032">SUSE bug 919032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0286</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0286" ref_url="https://www.suse.com/security/cve/CVE-2015-0286" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="TID7021977" ref_url="https://www.suse.com/support/kb/doc/?id=7021977" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0554-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0286/">CVE-2015-0286</cve>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922496">SUSE bug 922496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0287</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0287" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0287" ref_url="https://www.suse.com/security/cve/CVE-2015-0287" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001545.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="TID7021977" ref_url="https://www.suse.com/support/kb/doc/?id=7021977" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0554-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0287/">CVE-2015-0287</cve>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922499">SUSE bug 922499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968888">SUSE bug 968888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991722">SUSE bug 991722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0288</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0288" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0288" ref_url="https://www.suse.com/security/cve/CVE-2015-0288" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="TID7021977" ref_url="https://www.suse.com/support/kb/doc/?id=7021977" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0554-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0288/">CVE-2015-0288</cve>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920236">SUSE bug 920236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0289</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0289" ref_url="https://www.suse.com/security/cve/CVE-2015-0289" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0578-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021714" ref_url="https://www.suse.com/support/kb/doc/?id=7021714" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021863" ref_url="https://www.suse.com/support/kb/doc/?id=7021863" source="SUSE-SU"/>
		<reference ref_id="TID7021977" ref_url="https://www.suse.com/support/kb/doc/?id=7021977" source="SUSE-SU"/>
		<reference ref_id="TID7021993" ref_url="https://www.suse.com/support/kb/doc/?id=7021993" source="SUSE-SU"/>
		<reference ref_id="TID7021994" ref_url="https://www.suse.com/support/kb/doc/?id=7021994" source="SUSE-SU"/>
		<reference ref_id="TID7021995" ref_url="https://www.suse.com/support/kb/doc/?id=7021995" source="SUSE-SU"/>
		<reference ref_id="TID7022095" ref_url="https://www.suse.com/support/kb/doc/?id=7022095" source="SUSE-SU"/>
		<reference ref_id="TID7022096" ref_url="https://www.suse.com/support/kb/doc/?id=7022096" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0554-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0289/">CVE-2015-0289</cve>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922500">SUSE bug 922500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0293</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0293" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0293" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0293" ref_url="https://www.suse.com/security/cve/CVE-2015-0293" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0546-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0578-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016336" ref_url="https://www.suse.com/support/kb/doc/?id=7016336" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0554-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0720-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0293/">CVE-2015-0293</cve>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922488">SUSE bug 922488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968051">SUSE bug 968051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968053">SUSE bug 968053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0295</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0295" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0295" ref_url="https://www.suse.com/security/cve/CVE-2015-0295" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001528.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001540.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0573-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html" source="SUSE-SU"/>
    <description>
    The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0295/">CVE-2015-0295</cve>
	<bugzilla href="https://bugzilla.suse.com/921999">SUSE bug 921999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927806">SUSE bug 927806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927807">SUSE bug 927807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927808">SUSE bug 927808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936523">SUSE bug 936523</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481215" comment="libQt5Concurrent-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481216" comment="libQt5Concurrent5-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481217" comment="libQt5Core-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481218" comment="libQt5Core-private-headers-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481219" comment="libQt5Core5-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481220" comment="libQt5DBus-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481221" comment="libQt5DBus-private-headers-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481222" comment="libQt5DBus5-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481223" comment="libQt5Gui-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481224" comment="libQt5Gui-private-headers-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481225" comment="libQt5Gui5-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481226" comment="libQt5KmsSupport-devel-static-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481227" comment="libQt5KmsSupport-private-headers-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481228" comment="libQt5Network-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481229" comment="libQt5Network-private-headers-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481230" comment="libQt5Network5-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481231" comment="libQt5OpenGL-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481232" comment="libQt5OpenGL-private-headers-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481233" comment="libQt5OpenGL5-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481234" comment="libQt5PlatformHeaders-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481235" comment="libQt5PlatformSupport-devel-static-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481236" comment="libQt5PlatformSupport-private-headers-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481237" comment="libQt5PrintSupport-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481238" comment="libQt5PrintSupport-private-headers-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481239" comment="libQt5PrintSupport5-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481240" comment="libQt5Sql-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481241" comment="libQt5Sql-private-headers-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481242" comment="libQt5Sql5-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481243" comment="libQt5Sql5-sqlite-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481244" comment="libQt5Test-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481245" comment="libQt5Test-private-headers-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481246" comment="libQt5Test5-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481247" comment="libQt5Widgets-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481248" comment="libQt5Widgets-private-headers-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481249" comment="libQt5Widgets5-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481250" comment="libQt5Xml-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481251" comment="libQt5Xml5-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481252" comment="libqt5-qtbase-common-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481253" comment="libqt5-qtbase-devel-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481254" comment="libqt5-qtbase-private-headers-devel-5.9.7-11.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486648" comment="libQt5OpenGLExtensions-devel-static-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486649" comment="libQt5Sql5-mysql-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486650" comment="libQt5Sql5-postgresql-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486651" comment="libQt5Sql5-unixODBC-5.9.7-11.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486652" comment="libqt5-qtbase-platformtheme-gtk3-5.9.7-11.11 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0458</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0458" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0458" ref_url="https://www.suse.com/security/cve/CVE-2015-0458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0458/">CVE-2015-0458</cve>
	<bugzilla href="https://bugzilla.suse.com/927591">SUSE bug 927591</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0459</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0459" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0459" ref_url="https://www.suse.com/security/cve/CVE-2015-0459" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0491.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0459/">CVE-2015-0459</cve>
	<bugzilla href="https://bugzilla.suse.com/927591">SUSE bug 927591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932310">SUSE bug 932310</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0469</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0469" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0469" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0469" ref_url="https://www.suse.com/security/cve/CVE-2015-0469" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0469/">CVE-2015-0469</cve>
	<bugzilla href="https://bugzilla.suse.com/927591">SUSE bug 927591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932310">SUSE bug 932310</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0477</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0477" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0477" ref_url="https://www.suse.com/security/cve/CVE-2015-0477" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors related to Beans.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0477/">CVE-2015-0477</cve>
	<bugzilla href="https://bugzilla.suse.com/927591">SUSE bug 927591</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0478</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0478" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0478" ref_url="https://www.suse.com/security/cve/CVE-2015-0478" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0478/">CVE-2015-0478</cve>
	<bugzilla href="https://bugzilla.suse.com/927591">SUSE bug 927591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944456">SUSE bug 944456</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0480</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0480" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0480" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0480" ref_url="https://www.suse.com/security/cve/CVE-2015-0480" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity and availability via unknown vectors related to Tools.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0480/">CVE-2015-0480</cve>
	<bugzilla href="https://bugzilla.suse.com/927591">SUSE bug 927591</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0486</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0486" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0486" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0486" ref_url="https://www.suse.com/security/cve/CVE-2015-0486" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0486/">CVE-2015-0486</cve>
	<bugzilla href="https://bugzilla.suse.com/927591">SUSE bug 927591</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0488</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0488" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0488" ref_url="https://www.suse.com/security/cve/CVE-2015-0488" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0488/">CVE-2015-0488</cve>
	<bugzilla href="https://bugzilla.suse.com/927591">SUSE bug 927591</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0491</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0491" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0491" ref_url="https://www.suse.com/security/cve/CVE-2015-0491" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0491/">CVE-2015-0491</cve>
	<bugzilla href="https://bugzilla.suse.com/927591">SUSE bug 927591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932310">SUSE bug 932310</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0552</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0552" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0552" ref_url="https://www.suse.com/security/cve/CVE-2015-0552" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0043-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00018.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0552/">CVE-2015-0552</cve>
	<bugzilla href="https://bugzilla.suse.com/911814">SUSE bug 911814</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482681" comment="gcab-1.1-1.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482682" comment="gcab-devel-1.1-1.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482683" comment="gcab-lang-1.1-1.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482684" comment="libgcab-1_0-0-1.1-1.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482685" comment="typelib-1_0-GCab-1_0-1.1-1.15 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0559</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0559" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0559" ref_url="https://www.suse.com/security/cve/CVE-2015-0559" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001267.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0113-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0559/">CVE-2015-0559</cve>
	<bugzilla href="https://bugzilla.suse.com/912365">SUSE bug 912365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0560</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0560" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0560" ref_url="https://www.suse.com/security/cve/CVE-2015-0560" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001267.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0113-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html" source="SUSE-SU"/>
    <description>
    The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not initialize certain data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0560/">CVE-2015-0560</cve>
	<bugzilla href="https://bugzilla.suse.com/912365">SUSE bug 912365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0561</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0561" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0561" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0561" ref_url="https://www.suse.com/security/cve/CVE-2015-0561" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001267.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0113-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html" source="SUSE-SU"/>
    <description>
    asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a certain index value, which allows remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0561/">CVE-2015-0561</cve>
	<bugzilla href="https://bugzilla.suse.com/912368">SUSE bug 912368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0562</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0562" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0562" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0562" ref_url="https://www.suse.com/security/cve/CVE-2015-0562" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001267.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0113-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0562/">CVE-2015-0562</cve>
	<bugzilla href="https://bugzilla.suse.com/912369">SUSE bug 912369</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0563</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0563" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0563" ref_url="https://www.suse.com/security/cve/CVE-2015-0563" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001267.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0113-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for certain string-append operations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0563/">CVE-2015-0563</cve>
	<bugzilla href="https://bugzilla.suse.com/912370">SUSE bug 912370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0564</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0564" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0564" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0564" ref_url="https://www.suse.com/security/cve/CVE-2015-0564" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0426-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001267.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0113-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00053.html" source="SUSE-SU"/>
    <description>
    Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0564/">CVE-2015-0564</cve>
	<bugzilla href="https://bugzilla.suse.com/912372">SUSE bug 912372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0777</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0777" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0777" ref_url="https://www.suse.com/security/cve/CVE-2015-0777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001611.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
    <description>
    drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0777/">CVE-2015-0777</cve>
	<bugzilla href="https://bugzilla.suse.com/917830">SUSE bug 917830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0778</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0778" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0778" ref_url="https://www.suse.com/security/cve/CVE-2015-0778" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001529.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00011.html" source="SUSE-SU"/>
    <description>
    osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a _service file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<cve href="https://www.suse.com/security/cve/CVE-2015-0778/">CVE-2015-0778</cve>
	<bugzilla href="https://bugzilla.suse.com/901643">SUSE bug 901643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487777" comment="osc-0.165.0-1.3 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0794</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0794" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0794" ref_url="https://www.suse.com/security/cve/CVE-2015-0794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001690.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2022-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00098.html" source="SUSE-SU"/>
    <description>
    modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0794/">CVE-2015-0794</cve>
	<bugzilla href="https://bugzilla.suse.com/923755">SUSE bug 923755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935338">SUSE bug 935338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963976">SUSE bug 963976</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694233" comment="dracut is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009694233" comment="dracut is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694234" comment="dracut-fips is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694235" comment="dracut-ima is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0798</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0798" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0798" ref_url="https://www.suse.com/security/cve/CVE-2015-0798" source="SUSE CVE"/>
    <description>
    The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0798/">CVE-2015-0798</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0799</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0799" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0799" ref_url="https://www.suse.com/security/cve/CVE-2015-0799" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0799/">CVE-2015-0799</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/926166">SUSE bug 926166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0800</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0800" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0800" ref_url="https://www.suse.com/security/cve/CVE-2015-0800" source="SUSE CVE"/>
    <description>
    The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0800/">CVE-2015-0800</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0801</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0801" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0801" ref_url="https://www.suse.com/security/cve/CVE-2015-0801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0704-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001346.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation, a similar issue to CVE-2015-0818.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0801/">CVE-2015-0801</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925401">SUSE bug 925401</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0802</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0802" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0802" ref_url="https://www.suse.com/security/cve/CVE-2015-0802" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via certain content navigation that leverages the reachability of a privileged window with an unintended persistence of access to restricted internal methods.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0802/">CVE-2015-0802</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925402">SUSE bug 925402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0803</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0803" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0803" ref_url="https://www.suse.com/security/cve/CVE-2015-0803" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element's attributes, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0803/">CVE-2015-0803</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925400">SUSE bug 925400</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0804</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0804" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0804" ref_url="https://www.suse.com/security/cve/CVE-2015-0804" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly constrain a data type after omitting namespace validation during certain tree-binding operations, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document containing a SOURCE element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0804/">CVE-2015-0804</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925400">SUSE bug 925400</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0805</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0805" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0805" ref_url="https://www.suse.com/security/cve/CVE-2015-0805" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an incorrect memset call during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors that trigger rendering of 2D graphics content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0805/">CVE-2015-0805</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925399">SUSE bug 925399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0806</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0806" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0806" ref_url="https://www.suse.com/security/cve/CVE-2015-0806" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to use memset for a memory region of negative length during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors that trigger rendering of 2D graphics content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0806/">CVE-2015-0806</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925399">SUSE bug 925399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0807</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0807" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0807" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0807" ref_url="https://www.suse.com/security/cve/CVE-2015-0807" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0704-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001346.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0807/">CVE-2015-0807</cve>
	<bugzilla href="https://bugzilla.suse.com/913068">SUSE bug 913068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925398">SUSE bug 925398</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0808</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0808" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0808" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0808" ref_url="https://www.suse.com/security/cve/CVE-2015-0808" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox before 37.0 uses incompatible approaches to the deallocation of memory for simple-type arrays, which might allow remote attackers to cause a denial of service (memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0808/">CVE-2015-0808</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925397">SUSE bug 925397</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0810</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0810" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0810" ref_url="https://www.suse.com/security/cve/CVE-2015-0810" source="SUSE CVE"/>
    <description>
    Mozilla Firefox before 37.0 on OS X does not ensure that the cursor is visible, which allows remote attackers to conduct clickjacking attacks via a Flash object in conjunction with DIV elements associated with layered presentation, and crafted JavaScript code that interacts with an IMG element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0810/">CVE-2015-0810</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0811</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0811" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0811" ref_url="https://www.suse.com/security/cve/CVE-2015-0811" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain sensitive information from process heap memory or cause a denial of service (out-of-bounds read) via an image that is improperly handled during transformation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0811/">CVE-2015-0811</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925396">SUSE bug 925396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0812</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0812" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0812" ref_url="https://www.suse.com/security/cve/CVE-2015-0812" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0812/">CVE-2015-0812</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925394">SUSE bug 925394</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0813</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0813" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0813" ref_url="https://www.suse.com/security/cve/CVE-2015-0813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0704-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001346.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted MP3 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0813/">CVE-2015-0813</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925393">SUSE bug 925393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0814</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0814" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0814" ref_url="https://www.suse.com/security/cve/CVE-2015-0814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0704-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001346.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0814/">CVE-2015-0814</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925392">SUSE bug 925392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0815</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0815" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0815" ref_url="https://www.suse.com/security/cve/CVE-2015-0815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0704-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0815/">CVE-2015-0815</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925392">SUSE bug 925392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0816</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0816" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0816" ref_url="https://www.suse.com/security/cve/CVE-2015-0816" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0704-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0704-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001346.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy, as demonstrated by the resource: URL associated with PDF.js.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0816/">CVE-2015-0816</cve>
	<bugzilla href="https://bugzilla.suse.com/925368">SUSE bug 925368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/925395">SUSE bug 925395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0817</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0817" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0817" ref_url="https://www.suse.com/security/cve/CVE-2015-0817" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0593-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0593-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0607-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html" source="SUSE-SU"/>
    <description>
    The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly determine the cases in which bounds checking may be safely skipped during JIT compilation and heap access, which allows remote attackers to read or write to unintended memory locations, and consequently execute arbitrary code, via crafted JavaScript.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0817/">CVE-2015-0817</cve>
	<bugzilla href="https://bugzilla.suse.com/923495">SUSE bug 923495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0818</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0818" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0818" ref_url="https://www.suse.com/security/cve/CVE-2015-0818" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0593-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0593-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0607-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0818/">CVE-2015-0818</cve>
	<bugzilla href="https://bugzilla.suse.com/923495">SUSE bug 923495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0819</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0819" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0819" ref_url="https://www.suse.com/security/cve/CVE-2015-0819" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0819/">CVE-2015-0819</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0820</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0820" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0820" ref_url="https://www.suse.com/security/cve/CVE-2015-0820" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a non-extensible state to an extensible state, which allows remote attackers to bypass a Caja Compiler sandbox protection mechanism or a Secure EcmaScript sandbox protection mechanism via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0820/">CVE-2015-0820</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0821</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0821" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0821" ref_url="https://www.suse.com/security/cve/CVE-2015-0821" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0821/">CVE-2015-0821</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0822</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0822" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0822" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0822" ref_url="https://www.suse.com/security/cve/CVE-2015-0822" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0822/">CVE-2015-0822</cve>
	<bugzilla href="https://bugzilla.suse.com/910669">SUSE bug 910669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924515">SUSE bug 924515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0823</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0823" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0823" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0823" ref_url="https://www.suse.com/security/cve/CVE-2015-0823" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly have unspecified other impact by leveraging incorrect macro expansion, related to the ots::ots_gasp_parse function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0823/">CVE-2015-0823</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0824</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0824" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0824" ref_url="https://www.suse.com/security/cve/CVE-2015-0824" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service (out-of-bounds write of zero values, and application crash) via vectors that trigger use of DrawTarget and the Cairo library for image drawing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0824/">CVE-2015-0824</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0825</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0825" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0825" ref_url="https://www.suse.com/security/cve/CVE-2015-0825" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed MP3 file that improperly interacts with memory allocation during playback.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0825/">CVE-2015-0825</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0826</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0826" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0826" ref_url="https://www.suse.com/security/cve/CVE-2015-0826" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read of heap memory) via a crafted Cascading Style Sheets (CSS) token sequence that triggers a restyle or reflow operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0826/">CVE-2015-0826</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0827</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0827" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0827" ref_url="https://www.suse.com/security/cve/CVE-2015-0827" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0827/">CVE-2015-0827</cve>
	<bugzilla href="https://bugzilla.suse.com/910669">SUSE bug 910669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924515">SUSE bug 924515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0828</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0828" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0828" ref_url="https://www.suse.com/security/cve/CVE-2015-0828" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0828/">CVE-2015-0828</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0829</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0829" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0829" ref_url="https://www.suse.com/security/cve/CVE-2015-0829" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via a crafted MP4 video that is improperly handled during playback.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0829/">CVE-2015-0829</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0830</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0830" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0830" ref_url="https://www.suse.com/security/cve/CVE-2015-0830" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote attackers to cause a denial of service (application crash) via crafted WebGL content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0830/">CVE-2015-0830</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0831</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0831" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0831" ref_url="https://www.suse.com/security/cve/CVE-2015-0831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0831/">CVE-2015-0831</cve>
	<bugzilla href="https://bugzilla.suse.com/910669">SUSE bug 910669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924515">SUSE bug 924515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0832</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0832" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0832" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0832" ref_url="https://www.suse.com/security/cve/CVE-2015-0832" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0832/">CVE-2015-0832</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0833</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0833" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0833" ref_url="https://www.suse.com/security/cve/CVE-2015-0833" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0833/">CVE-2015-0833</cve>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0834</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0834" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0834" ref_url="https://www.suse.com/security/cve/CVE-2015-0834" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time window.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0834/">CVE-2015-0834</cve>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0835</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0835" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0835" ref_url="https://www.suse.com/security/cve/CVE-2015-0835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0835/">CVE-2015-0835</cve>
	<bugzilla href="https://bugzilla.suse.com/910669">SUSE bug 910669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924515">SUSE bug 924515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0836</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0836" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0836" ref_url="https://www.suse.com/security/cve/CVE-2015-0836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0447-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0836/">CVE-2015-0836</cve>
	<bugzilla href="https://bugzilla.suse.com/910669">SUSE bug 910669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917597">SUSE bug 917597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923534">SUSE bug 923534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924515">SUSE bug 924515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0837</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0837" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0837" ref_url="https://www.suse.com/security/cve/CVE-2015-0837" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001579.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1626-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001602.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00005.html" source="SUSE-SU"/>
    <description>
    The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-0837/">CVE-2015-0837</cve>
	<bugzilla href="https://bugzilla.suse.com/920057">SUSE bug 920057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481367" comment="libgcrypt-devel-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481368" comment="libgcrypt20-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481369" comment="libgcrypt20-32bit-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481370" comment="libgcrypt20-hmac-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481371" comment="libgcrypt20-hmac-32bit-1.8.2-6.7 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0839</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0839" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0839" ref_url="https://www.suse.com/security/cve/CVE-2015-0839" source="SUSE CVE"/>
    <description>
    The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0839/">CVE-2015-0839</cve>
	<bugzilla href="https://bugzilla.suse.com/933191">SUSE bug 933191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486642" comment="hplip-3.18.6-5.7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333966" comment="hplip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009476541" comment="hplip-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335141" comment="hplip-hpijs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335142" comment="hplip-sane is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481186" comment="hplip-devel-3.18.6-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481187" comment="hplip-hpijs-3.18.6-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481188" comment="hplip-sane-3.18.6-5.7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0840</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0840" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0840" ref_url="https://www.suse.com/security/cve/CVE-2015-0840" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1058-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00029.html" source="SUSE-SU"/>
    <description>
    The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0840/">CVE-2015-0840</cve>
	<bugzilla href="https://bugzilla.suse.com/926749">SUSE bug 926749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480953" comment="update-alternatives-1.19.0.4-2.48 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487633" comment="dpkg-1.19.0.4-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487634" comment="dpkg-devel-1.19.0.4-2.30 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0848</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0848" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0848" ref_url="https://www.suse.com/security/cve/CVE-2015-0848" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001569.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1132-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1134-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0848/">CVE-2015-0848</cve>
	<bugzilla href="https://bugzilla.suse.com/933109">SUSE bug 933109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489034" comment="libwmf-0_2-7-0.2.8.4-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489035" comment="libwmf-devel-0.2.8.4-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489036" comment="libwmf-gnome-0.2.8.4-2.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0973</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-0973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0973" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-0973" ref_url="https://www.suse.com/security/cve/CVE-2015-0973" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0973/">CVE-2015-0973</cve>
	<bugzilla href="https://bugzilla.suse.com/912929">SUSE bug 912929</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201510082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-10082</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-10082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-10082" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-10082" ref_url="https://www.suse.com/security/cve/CVE-2015-10082" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2023:0872-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014138.html" source="SUSE-SU"/>
    <description>
    A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The name of the patch is c086cb139af7c82845f6d565e636073ff4b37440. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-221499.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-23"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2015-10082/">CVE-2015-10082</cve>
	<bugzilla href="https://bugzilla.suse.com/1208546">SUSE bug 1208546</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009742021" comment="libplist++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009742022" comment="libplist++3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009742023" comment="libplist-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009742024" comment="libplist3 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1038</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1038" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1038" ref_url="https://www.suse.com/security/cve/CVE-2015-1038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001551.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00000.html" source="SUSE-SU"/>
    <description>
    p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1038/">CVE-2015-1038</cve>
	<bugzilla href="https://bugzilla.suse.com/912878">SUSE bug 912878</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480858" comment="p7zip-16.02-5.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1158</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1158" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1158" ref_url="https://www.suse.com/security/cve/CVE-2015-1158" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html" source="SUSE-SU"/>
    <description>
    The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-1158/">CVE-2015-1158</cve>
	<bugzilla href="https://bugzilla.suse.com/924208">SUSE bug 924208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976653">SUSE bug 976653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487749" comment="cups-ddk-2.2.7-3.11.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481064" comment="cups-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481065" comment="cups-client-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481066" comment="cups-config-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481067" comment="cups-devel-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481068" comment="libcups2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481069" comment="libcups2-32bit-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481070" comment="libcupscgi1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481071" comment="libcupsimage2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481072" comment="libcupsmime1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481073" comment="libcupsppdc1-2.2.7-3.11.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1159</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1159" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1159" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1159" ref_url="https://www.suse.com/security/cve/CVE-2015-1159" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-1159/">CVE-2015-1159</cve>
	<bugzilla href="https://bugzilla.suse.com/924208">SUSE bug 924208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976653">SUSE bug 976653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487749" comment="cups-ddk-2.2.7-3.11.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481064" comment="cups-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481065" comment="cups-client-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481066" comment="cups-config-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481067" comment="cups-devel-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481068" comment="libcups2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481069" comment="libcups2-32bit-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481070" comment="libcupscgi1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481071" comment="libcupsimage2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481072" comment="libcupsmime1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481073" comment="libcupsppdc1-2.2.7-3.11.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1196</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1196" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1196" ref_url="https://www.suse.com/security/cve/CVE-2015-1196" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1019-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001427.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00013.html" source="SUSE-SU"/>
    <description>
    GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1196/">CVE-2015-1196</cve>
	<bugzilla href="https://bugzilla.suse.com/913678">SUSE bug 913678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915329">SUSE bug 915329</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481616" comment="patch-2.7.6-3.5 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1283</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1283" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1283" ref_url="https://www.suse.com/security/cve/CVE-2015-1283" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1508-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1512-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1283/">CVE-2015-1283</cve>
	<bugzilla href="https://bugzilla.suse.com/1034050">SUSE bug 1034050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979441">SUSE bug 979441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980391">SUSE bug 980391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983985">SUSE bug 983985</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1345</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1345" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1345" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1345" ref_url="https://www.suse.com/security/cve/CVE-2015-1345" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0243-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1345/">CVE-2015-1345</cve>
	<bugzilla href="https://bugzilla.suse.com/914695">SUSE bug 914695</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480304" comment="grep-3.1-2.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480305" comment="grep-lang-3.1-2.20 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1349</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1349" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1349" ref_url="https://www.suse.com/security/cve/CVE-2015-1349" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1250-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1349/">CVE-2015-1349</cve>
	<bugzilla href="https://bugzilla.suse.com/918330">SUSE bug 918330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1350</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1350" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1350" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1350" ref_url="https://www.suse.com/security/cve/CVE-2015-1350" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00026.html" source="SUSE-SU"/>
    <description>
    The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-16"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1350/">CVE-2015-1350</cve>
	<bugzilla href="https://bugzilla.suse.com/1052256">SUSE bug 1052256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914939">SUSE bug 914939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1351</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1351" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1351" ref_url="https://www.suse.com/security/cve/CVE-2015-1351" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005657.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1351/">CVE-2015-1351</cve>
	<bugzilla href="https://bugzilla.suse.com/1137633">SUSE bug 1137633</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1379</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1379" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1379" ref_url="https://www.suse.com/security/cve/CVE-2015-1379" source="SUSE CVE"/>
    <description>
    The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1379/">CVE-2015-1379</cve>
	<bugzilla href="https://bugzilla.suse.com/922903">SUSE bug 922903</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333939" comment="socat is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1419</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1419" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1419" ref_url="https://www.suse.com/security/cve/CVE-2015-1419" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0417-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001265.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001294.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0428-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00012.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1419/">CVE-2015-1419</cve>
	<bugzilla href="https://bugzilla.suse.com/900326">SUSE bug 900326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915522">SUSE bug 915522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922024">SUSE bug 922024</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488453" comment="vsftpd-3.0.3-7.7.9 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1420</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1420" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1420" ref_url="https://www.suse.com/security/cve/CVE-2015-1420" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001706.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
    <description>
    Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1420/">CVE-2015-1420</cve>
	<bugzilla href="https://bugzilla.suse.com/915517">SUSE bug 915517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1461</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1461" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1461" ref_url="https://www.suse.com/security/cve/CVE-2015-1461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001226.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html" source="SUSE-SU"/>
    <description>
    ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a "heap out of bounds condition."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1461/">CVE-2015-1461</cve>
	<bugzilla href="https://bugzilla.suse.com/1040662">SUSE bug 1040662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916217">SUSE bug 916217</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1462</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1462" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1462" ref_url="https://www.suse.com/security/cve/CVE-2015-1462" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001226.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html" source="SUSE-SU"/>
    <description>
    ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer file, related to a "heap out of bounds condition."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1462/">CVE-2015-1462</cve>
	<bugzilla href="https://bugzilla.suse.com/1040662">SUSE bug 1040662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916214">SUSE bug 916214</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1463</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1463" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1463" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1463" ref_url="https://www.suse.com/security/cve/CVE-2015-1463" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-February/001226.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html" source="SUSE-SU"/>
    <description>
    ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an "incorrect compiler optimization."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1463/">CVE-2015-1463</cve>
	<bugzilla href="https://bugzilla.suse.com/1040662">SUSE bug 1040662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916215">SUSE bug 916215</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1472</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1472" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1472" ref_url="https://www.suse.com/security/cve/CVE-2015-1472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001304.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001305.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0351-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html" source="SUSE-SU"/>
    <description>
    The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1472/">CVE-2015-1472</cve>
	<bugzilla href="https://bugzilla.suse.com/916222">SUSE bug 916222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920341">SUSE bug 920341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922243">SUSE bug 922243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1473</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1473" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1473" ref_url="https://www.suse.com/security/cve/CVE-2015-1473" source="SUSE CVE"/>
    <description>
    The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during a risk-management decision for use of the alloca function, which might allow context-dependent attackers to cause a denial of service (segmentation violation) or overwrite memory locations beyond the stack boundary via a long line containing wide characters that are improperly handled in a wscanf call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1473/">CVE-2015-1473</cve>
	<bugzilla href="https://bugzilla.suse.com/916222">SUSE bug 916222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920341">SUSE bug 920341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922243">SUSE bug 922243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1545</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1545" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1545" ref_url="https://www.suse.com/security/cve/CVE-2015-1545" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001389.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1325-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html" source="SUSE-SU"/>
    <description>
    The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1545/">CVE-2015-1545</cve>
	<bugzilla href="https://bugzilla.suse.com/846389">SUSE bug 846389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916897">SUSE bug 916897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916914">SUSE bug 916914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487776" comment="openldap2-devel-32bit-2.4.46-9.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481417" comment="libldap-2_4-2-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481418" comment="libldap-2_4-2-32bit-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481419" comment="openldap2-client-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481420" comment="openldap2-devel-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481421" comment="openldap2-devel-static-2.4.46-9.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488058" comment="openldap2-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488059" comment="openldap2-back-meta-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488060" comment="openldap2-back-perl-2.4.46-9.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1546</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1546" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1546" ref_url="https://www.suse.com/security/cve/CVE-2015-1546" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001389.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1325-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service (crash) via a crafted search query with a matched values control.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1546/">CVE-2015-1546</cve>
	<bugzilla href="https://bugzilla.suse.com/916914">SUSE bug 916914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487776" comment="openldap2-devel-32bit-2.4.46-9.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481417" comment="libldap-2_4-2-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481418" comment="libldap-2_4-2-32bit-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481419" comment="openldap2-client-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481420" comment="openldap2-devel-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481421" comment="openldap2-devel-static-2.4.46-9.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488058" comment="openldap2-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488059" comment="openldap2-back-meta-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488060" comment="openldap2-back-perl-2.4.46-9.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1547</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1547" ref_url="https://www.suse.com/security/cve/CVE-2015-1547" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1213-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00019.html" source="SUSE-SU"/>
    <description>
    The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1547/">CVE-2015-1547</cve>
	<bugzilla href="https://bugzilla.suse.com/1206220">SUSE bug 1206220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914890">SUSE bug 914890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916925">SUSE bug 916925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1572</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1572" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1572" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1572" ref_url="https://www.suse.com/security/cve/CVE-2015-1572" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001524.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001530.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004281.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00050.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-1572/">CVE-2015-1572</cve>
	<bugzilla href="https://bugzilla.suse.com/1123790">SUSE bug 1123790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915402">SUSE bug 915402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/918346">SUSE bug 918346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009674347" comment="e2fsprogs-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782652" comment="e2fsprogs-devel-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782653" comment="libcom_err-devel-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782654" comment="libcom_err-devel-static-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674348" comment="libcom_err2-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782655" comment="libcom_err2-32bit-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782656" comment="libext2fs-devel-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782657" comment="libext2fs-devel-static-1.43.8-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674349" comment="libext2fs2-1.43.8-4.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1593</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1593" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1593" ref_url="https://www.suse.com/security/cve/CVE-2015-1593" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0713-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html" source="SUSE-SU"/>
    <description>
    The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which makes it easier for attackers to bypass the ASLR protection mechanism by predicting the address of the top of the stack, related to the randomize_stack_top function in fs/binfmt_elf.c and the stack_maxrandom_size function in arch/x86/mm/mmap.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1593/">CVE-2015-1593</cve>
	<bugzilla href="https://bugzilla.suse.com/1044934">SUSE bug 1044934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917839">SUSE bug 917839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1779</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1779" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1779" ref_url="https://www.suse.com/security/cve/CVE-2015-1779" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0870-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008673.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1779/">CVE-2015-1779</cve>
	<bugzilla href="https://bugzilla.suse.com/924018">SUSE bug 924018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962632">SUSE bug 962632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1781</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1781" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1781" ref_url="https://www.suse.com/security/cve/CVE-2015-1781" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001651.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0955-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00084.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1781/">CVE-2015-1781</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927080">SUSE bug 927080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979109">SUSE bug 979109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1782</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1782" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1782" ref_url="https://www.suse.com/security/cve/CVE-2015-1782" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001330.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001334.html" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0534-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00057.html" source="SUSE-SU"/>
    <description>
    The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an SSH_MSG_KEXINIT packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1782/">CVE-2015-1782</cve>
	<bugzilla href="https://bugzilla.suse.com/921070">SUSE bug 921070</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481499" comment="libssh2-1-1.8.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481500" comment="libssh2-devel-1.8.0-4.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1788</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1788" ref_url="https://www.suse.com/security/cve/CVE-2015-1788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="TID7016539" ref_url="https://www.suse.com/support/kb/doc/?id=7016539" source="SUSE-SU"/>
		<reference ref_id="TID7016602" ref_url="https://www.suse.com/support/kb/doc/?id=7016602" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1788/">CVE-2015-1788</cve>
	<bugzilla href="https://bugzilla.suse.com/934487">SUSE bug 934487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934666">SUSE bug 934666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938432">SUSE bug 938432</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1789</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1789" ref_url="https://www.suse.com/security/cve/CVE-2015-1789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1183-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016539" ref_url="https://www.suse.com/support/kb/doc/?id=7016539" source="SUSE-SU"/>
		<reference ref_id="TID7016602" ref_url="https://www.suse.com/support/kb/doc/?id=7016602" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1789/">CVE-2015-1789</cve>
	<bugzilla href="https://bugzilla.suse.com/934489">SUSE bug 934489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934666">SUSE bug 934666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938432">SUSE bug 938432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1790</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1790" ref_url="https://www.suse.com/security/cve/CVE-2015-1790" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1183-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016539" ref_url="https://www.suse.com/support/kb/doc/?id=7016539" source="SUSE-SU"/>
		<reference ref_id="TID7016602" ref_url="https://www.suse.com/support/kb/doc/?id=7016602" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1790/">CVE-2015-1790</cve>
	<bugzilla href="https://bugzilla.suse.com/934491">SUSE bug 934491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934666">SUSE bug 934666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936586">SUSE bug 936586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938432">SUSE bug 938432</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1791</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1791" ref_url="https://www.suse.com/security/cve/CVE-2015-1791" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="TID7016539" ref_url="https://www.suse.com/support/kb/doc/?id=7016539" source="SUSE-SU"/>
		<reference ref_id="TID7016602" ref_url="https://www.suse.com/support/kb/doc/?id=7016602" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1791/">CVE-2015-1791</cve>
	<bugzilla href="https://bugzilla.suse.com/933911">SUSE bug 933911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934666">SUSE bug 934666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989464">SUSE bug 989464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1792</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1792" ref_url="https://www.suse.com/security/cve/CVE-2015-1792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="TID7016539" ref_url="https://www.suse.com/support/kb/doc/?id=7016539" source="SUSE-SU"/>
		<reference ref_id="TID7016602" ref_url="https://www.suse.com/support/kb/doc/?id=7016602" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1792/">CVE-2015-1792</cve>
	<bugzilla href="https://bugzilla.suse.com/934493">SUSE bug 934493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934666">SUSE bug 934666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937891">SUSE bug 937891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1793</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1793" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1793" ref_url="https://www.suse.com/security/cve/CVE-2015-1793" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="TID7016662" ref_url="https://www.suse.com/support/kb/doc/?id=7016662" source="SUSE-SU"/>
		<reference ref_id="TID7016686" ref_url="https://www.suse.com/support/kb/doc/?id=7016686" source="SUSE-SU"/>
		<reference ref_id="TID7016693" ref_url="https://www.suse.com/support/kb/doc/?id=7016693" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1793/">CVE-2015-1793</cve>
	<bugzilla href="https://bugzilla.suse.com/936746">SUSE bug 936746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937637">SUSE bug 937637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1794</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1794" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1794" ref_url="https://www.suse.com/security/cve/CVE-2015-1794" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
    <description>
    The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1794/">CVE-2015-1794</cve>
	<bugzilla href="https://bugzilla.suse.com/957984">SUSE bug 957984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1798</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1798" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1798" ref_url="https://www.suse.com/security/cve/CVE-2015-1798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0865-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0775-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html" source="SUSE-SU"/>
    <description>
    The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1798/">CVE-2015-1798</cve>
	<bugzilla href="https://bugzilla.suse.com/924202">SUSE bug 924202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927497">SUSE bug 927497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928321">SUSE bug 928321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936327">SUSE bug 936327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957163">SUSE bug 957163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1799</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1799" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1799" ref_url="https://www.suse.com/security/cve/CVE-2015-1799" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0865-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1173-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0775-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html" source="SUSE-SU"/>
    <description>
    The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization loss) by spoofing the source IP address of a peer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1799/">CVE-2015-1799</cve>
	<bugzilla href="https://bugzilla.suse.com/924202">SUSE bug 924202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927497">SUSE bug 927497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928321">SUSE bug 928321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936327">SUSE bug 936327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943565">SUSE bug 943565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957163">SUSE bug 957163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962624">SUSE bug 962624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1802</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1802" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1802" ref_url="https://www.suse.com/security/cve/CVE-2015-1802" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0702-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021836" ref_url="https://www.suse.com/support/kb/doc/?id=7021836" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0614-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html" source="SUSE-SU"/>
    <description>
    The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a (1) negative or (2) large property count in a BDF font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1802/">CVE-2015-1802</cve>
	<bugzilla href="https://bugzilla.suse.com/921978">SUSE bug 921978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480420" comment="libXfont-devel-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1803</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1803" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1803" ref_url="https://www.suse.com/security/cve/CVE-2015-1803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0702-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0614-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html" source="SUSE-SU"/>
    <description>
    The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1803/">CVE-2015-1803</cve>
	<bugzilla href="https://bugzilla.suse.com/921978">SUSE bug 921978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480420" comment="libXfont-devel-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1804</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1804" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1804" ref_url="https://www.suse.com/security/cve/CVE-2015-1804" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0702-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021836" ref_url="https://www.suse.com/support/kb/doc/?id=7021836" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0614-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2300-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00074.html" source="SUSE-SU"/>
    <description>
    The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1804/">CVE-2015-1804</cve>
	<bugzilla href="https://bugzilla.suse.com/921978">SUSE bug 921978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480420" comment="libXfont-devel-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1805</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1805" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1805" ref_url="https://www.suse.com/security/cve/CVE-2015-1805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1488-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001611.html" source="SUSE-SU"/>
    <description>
    The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1805/">CVE-2015-1805</cve>
	<bugzilla href="https://bugzilla.suse.com/917839">SUSE bug 917839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933429">SUSE bug 933429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939270">SUSE bug 939270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964730">SUSE bug 964730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964732">SUSE bug 964732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1819</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1819" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1819" ref_url="https://www.suse.com/security/cve/CVE-2015-1819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1819/">CVE-2015-1819</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928193">SUSE bug 928193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969769">SUSE bug 969769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1821</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1821" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1821" ref_url="https://www.suse.com/security/cve/CVE-2015-1821" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chronyd crash) or possibly execute arbitrary code by configuring the (1) NTP or (2) cmdmon access with a subnet size that is indivisible by four and an address with a nonzero bit in the subnet remainder.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1821/">CVE-2015-1821</cve>
	<bugzilla href="https://bugzilla.suse.com/926323">SUSE bug 926323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342637" comment="chrony is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009342637" comment="chrony is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348254" comment="chrony-pool-empty is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348255" comment="chrony-pool-suse is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1822</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1822" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1822" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1822" ref_url="https://www.suse.com/security/cve/CVE-2015-1822" source="SUSE CVE"/>
    <description>
    chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a large number of command requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1822/">CVE-2015-1822</cve>
	<bugzilla href="https://bugzilla.suse.com/926323">SUSE bug 926323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342637" comment="chrony is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009342637" comment="chrony is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348254" comment="chrony-pool-empty is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348255" comment="chrony-pool-suse is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1852</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1852" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1852" ref_url="https://www.suse.com/security/cve/CVE-2015-1852" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001487.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001552.html" source="SUSE-SU"/>
    <description>
    The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1852/">CVE-2015-1852</cve>
	<bugzilla href="https://bugzilla.suse.com/928205">SUSE bug 928205</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488086" comment="python3-keystoneclient-3.15.0-2.33 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1853</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1853" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1853" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1853" ref_url="https://www.suse.com/security/cve/CVE-2015-1853" source="SUSE CVE"/>
    <description>
    chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service (inability to synchronize) via random timestamps in crafted NTP data packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1853/">CVE-2015-1853</cve>
	<bugzilla href="https://bugzilla.suse.com/926323">SUSE bug 926323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342637" comment="chrony is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009342637" comment="chrony is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348254" comment="chrony-pool-empty is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348255" comment="chrony-pool-suse is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151854" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1854</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1854" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1854" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1854" ref_url="https://www.suse.com/security/cve/CVE-2015-1854" source="SUSE CVE"/>
    <description>
    389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-1854/">CVE-2015-1854</cve>
	<bugzilla href="https://bugzilla.suse.com/929034">SUSE bug 929034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488105" comment="389-ds-1.4.0.3-2.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488106" comment="389-ds-devel-1.4.0.3-2.39 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1855</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1855" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1855" ref_url="https://www.suse.com/security/cve/CVE-2015-1855" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002786.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00034.html" source="SUSE-SU"/>
    <description>
    verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-1855/">CVE-2015-1855</cve>
	<bugzilla href="https://bugzilla.suse.com/926974">SUSE bug 926974</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1858</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1858" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1858" ref_url="https://www.suse.com/security/cve/CVE-2015-1858" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001528.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001540.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1858/">CVE-2015-1858</cve>
	<bugzilla href="https://bugzilla.suse.com/921999">SUSE bug 921999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927806">SUSE bug 927806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927807">SUSE bug 927807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927808">SUSE bug 927808</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336506" comment="libQt5Concurrent-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336490" comment="libQt5Concurrent5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336507" comment="libQt5Core-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336508" comment="libQt5Core-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336491" comment="libQt5Core5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336509" comment="libQt5DBus-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336510" comment="libQt5DBus-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336492" comment="libQt5DBus5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336511" comment="libQt5Gui-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336512" comment="libQt5Gui-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336493" comment="libQt5Gui5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337945" comment="libQt5KmsSupport-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337946" comment="libQt5KmsSupport-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336513" comment="libQt5Network-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336514" comment="libQt5Network-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336494" comment="libQt5Network5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336515" comment="libQt5OpenGL-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336516" comment="libQt5OpenGL-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336495" comment="libQt5OpenGL5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336517" comment="libQt5OpenGLExtensions-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336518" comment="libQt5PlatformHeaders-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336519" comment="libQt5PlatformSupport-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336520" comment="libQt5PlatformSupport-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336521" comment="libQt5PrintSupport-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336522" comment="libQt5PrintSupport-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336496" comment="libQt5PrintSupport5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336523" comment="libQt5Sql-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336524" comment="libQt5Sql-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336497" comment="libQt5Sql5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336498" comment="libQt5Sql5-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336499" comment="libQt5Sql5-postgresql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336500" comment="libQt5Sql5-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336501" comment="libQt5Sql5-unixODBC is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336525" comment="libQt5Test-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336526" comment="libQt5Test-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336502" comment="libQt5Test5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336527" comment="libQt5Widgets-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336528" comment="libQt5Widgets-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336503" comment="libQt5Widgets5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336529" comment="libQt5Xml-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336504" comment="libQt5Xml5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336530" comment="libqt5-qtbase-common-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336531" comment="libqt5-qtbase-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009346550" comment="libqt5-qtbase-platformtheme-gtk3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336532" comment="libqt5-qtbase-private-headers-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1860</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1860" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1860" ref_url="https://www.suse.com/security/cve/CVE-2015-1860" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001528.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001540.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1860/">CVE-2015-1860</cve>
	<bugzilla href="https://bugzilla.suse.com/921999">SUSE bug 921999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927806">SUSE bug 927806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927807">SUSE bug 927807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927808">SUSE bug 927808</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336506" comment="libQt5Concurrent-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336490" comment="libQt5Concurrent5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336507" comment="libQt5Core-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336508" comment="libQt5Core-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336491" comment="libQt5Core5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336509" comment="libQt5DBus-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336510" comment="libQt5DBus-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336492" comment="libQt5DBus5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336511" comment="libQt5Gui-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336512" comment="libQt5Gui-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336493" comment="libQt5Gui5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337945" comment="libQt5KmsSupport-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337946" comment="libQt5KmsSupport-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336513" comment="libQt5Network-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336514" comment="libQt5Network-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336494" comment="libQt5Network5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336515" comment="libQt5OpenGL-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336516" comment="libQt5OpenGL-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336495" comment="libQt5OpenGL5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336517" comment="libQt5OpenGLExtensions-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336518" comment="libQt5PlatformHeaders-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336519" comment="libQt5PlatformSupport-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336520" comment="libQt5PlatformSupport-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336521" comment="libQt5PrintSupport-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336522" comment="libQt5PrintSupport-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336496" comment="libQt5PrintSupport5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336523" comment="libQt5Sql-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336524" comment="libQt5Sql-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336497" comment="libQt5Sql5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336498" comment="libQt5Sql5-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336499" comment="libQt5Sql5-postgresql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336500" comment="libQt5Sql5-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336501" comment="libQt5Sql5-unixODBC is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336525" comment="libQt5Test-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336526" comment="libQt5Test-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336502" comment="libQt5Test5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336527" comment="libQt5Widgets-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336528" comment="libQt5Widgets-private-headers-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336503" comment="libQt5Widgets5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336529" comment="libQt5Xml-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336504" comment="libQt5Xml5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336530" comment="libqt5-qtbase-common-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336531" comment="libqt5-qtbase-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009346550" comment="libqt5-qtbase-platformtheme-gtk3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336532" comment="libqt5-qtbase-private-headers-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1863</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1863" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1863" ref_url="https://www.suse.com/security/cve/CVE-2015-1863" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001423.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1863/">CVE-2015-1863</cve>
	<bugzilla href="https://bugzilla.suse.com/915323">SUSE bug 915323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927558">SUSE bug 927558</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481672" comment="wpa_supplicant-2.6-4.11.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1931</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-1931" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1931" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-1931" ref_url="https://www.suse.com/security/cve/CVE-2015-1931" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
    <description>
    IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-1931/">CVE-2015-1931</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939382">SUSE bug 939382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201520001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-20001</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-20001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-20001" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-20001" ref_url="https://www.suse.com/security/cve/CVE-2015-20001" source="SUSE CVE"/>
    <description>
    In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the comparison of generic elements inside sift_up or sift_down_range panics. This bug leads to a drop of zeroed memory as an arbitrary type, which can result in a memory safety violation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-20001/">CVE-2015-20001</cve>
	<bugzilla href="https://bugzilla.suse.com/1184586">SUSE bug 1184586</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340808" comment="rust is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009340805" comment="cargo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340806" comment="clippy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340807" comment="rls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340808" comment="rust is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340809" comment="rust-analysis is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340811" comment="rust-src is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340813" comment="rust-std-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340814" comment="rustfmt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201520107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-20107</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-20107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-20107" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-20107" ref_url="https://www.suse.com/security/cve/CVE-2015-20107" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011460.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011506.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1477-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011523.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011533.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011814.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012187.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012188.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011604.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011618.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011348.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011485.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011505.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2357-2" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/26DEFHSQZHFG2QZLJD7AX3TDPAXVFWZR/" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014044.html" source="SUSE-SU"/>
    <description>
    In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-18"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2015-20107/">CVE-2015-20107</cve>
	<bugzilla href="https://bugzilla.suse.com/1198511">SUSE bug 1198511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200507">SUSE bug 1200507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201777">SUSE bug 1201777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201791">SUSE bug 1201791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205068">SUSE bug 1205068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208337">SUSE bug 1208337</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684335" comment="libpython2_7-1_0-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693122" comment="libpython3_6m1_0-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684336" comment="python-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684337" comment="python-base-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684728" comment="python-curses-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684729" comment="python-devel-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684730" comment="python-gdbm-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684394" comment="python-tk-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684731" comment="python-xml-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693123" comment="python3-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693124" comment="python3-base-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693125" comment="python3-curses-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693126" comment="python3-dbm-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693127" comment="python3-devel-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693128" comment="python3-idle-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009699314" comment="python3-testsuite-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693129" comment="python3-tk-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693130" comment="python3-tools-3.6.15-150000.3.106.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009692553" comment="libpython2_7-1_0-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692535" comment="libpython3_6m1_0-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692554" comment="python-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692555" comment="python-base-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692556" comment="python-curses-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692557" comment="python-devel-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692558" comment="python-gdbm-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692559" comment="python-tk-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692560" comment="python-xml-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692536" comment="python3-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692537" comment="python3-base-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692538" comment="python3-curses-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692539" comment="python3-dbm-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692540" comment="python3-devel-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692541" comment="python3-idle-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692796" comment="python3-testsuite-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692542" comment="python3-tk-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692543" comment="python3-tools-3.6.15-150000.3.106.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009693315" comment="libpython2_7-1_0-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693298" comment="libpython3_6m1_0-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693316" comment="python-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693317" comment="python-base-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693318" comment="python-curses-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693319" comment="python-devel-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693320" comment="python-gdbm-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693321" comment="python-tk-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693322" comment="python-xml-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693299" comment="python3-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693300" comment="python3-base-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693301" comment="python3-curses-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693302" comment="python3-dbm-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693303" comment="python3-devel-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693304" comment="python3-idle-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693305" comment="python3-testsuite-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693306" comment="python3-tk-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693307" comment="python3-tools-3.6.15-150000.3.106.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009693817" comment="libpython2_7-1_0-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693796" comment="libpython3_6m1_0-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693818" comment="python-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693819" comment="python-base-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693820" comment="python-curses-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693821" comment="python-devel-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693822" comment="python-gdbm-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693823" comment="python-tk-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693824" comment="python-xml-2.7.18-150000.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693797" comment="python3-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693798" comment="python3-base-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693799" comment="python3-curses-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693800" comment="python3-dbm-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693801" comment="python3-devel-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693802" comment="python3-idle-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693803" comment="python3-testsuite-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693804" comment="python3-tk-3.6.15-150000.3.106.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693805" comment="python3-tools-3.6.15-150000.3.106.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152059" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2059</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2059" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2059" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2059" ref_url="https://www.suse.com/security/cve/CVE-2015-2059" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2226-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1261-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2277-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00041.html" source="SUSE-SU"/>
    <description>
    The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-2059/">CVE-2015-2059</cve>
	<bugzilla href="https://bugzilla.suse.com/1173590">SUSE bug 1173590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919214">SUSE bug 919214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923241">SUSE bug 923241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937096">SUSE bug 937096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937097">SUSE bug 937097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480552" comment="libidn-devel-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480553" comment="libidn11-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481380" comment="libidn11-32bit-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480554" comment="libidn2-0-2.0.4-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480555" comment="libidn2-0-32bit-2.0.4-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480556" comment="libidn2-devel-2.0.4-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2153</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2153" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2153" ref_url="https://www.suse.com/security/cve/CVE-2015-2153" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0616-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2153/">CVE-2015-2153</cve>
	<bugzilla href="https://bugzilla.suse.com/922221">SUSE bug 922221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922222">SUSE bug 922222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922223">SUSE bug 922223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2154</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2154" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2154" ref_url="https://www.suse.com/security/cve/CVE-2015-2154" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0692-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0616-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2154/">CVE-2015-2154</cve>
	<bugzilla href="https://bugzilla.suse.com/922222">SUSE bug 922222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2155</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2155" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2155" ref_url="https://www.suse.com/security/cve/CVE-2015-2155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0616-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2155/">CVE-2015-2155</cve>
	<bugzilla href="https://bugzilla.suse.com/922220">SUSE bug 922220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922221">SUSE bug 922221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922222">SUSE bug 922222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922223">SUSE bug 922223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2170</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2170" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2170" ref_url="https://www.suse.com/security/cve/CVE-2015-2170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001385.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001386.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html" source="SUSE-SU"/>
    <description>
    The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2170/">CVE-2015-2170</cve>
	<bugzilla href="https://bugzilla.suse.com/1040662">SUSE bug 1040662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/921950">SUSE bug 921950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922560">SUSE bug 922560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929192">SUSE bug 929192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2187</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2187" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2187" ref_url="https://www.suse.com/security/cve/CVE-2015-2187" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0489-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00038.html" source="SUSE-SU"/>
    <description>
    The dissect_atn_cpdlc_heur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c in the ATN-CPDLC dissector in Wireshark 1.12.x before 1.12.4 does not properly follow the TRY/ENDTRY code requirements, which allows remote attackers to cause a denial of service (stack memory corruption and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2187/">CVE-2015-2187</cve>
	<bugzilla href="https://bugzilla.suse.com/920695">SUSE bug 920695</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2188</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2188" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2188" ref_url="https://www.suse.com/security/cve/CVE-2015-2188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0657-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0657-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001325.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0489-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00038.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that is improperly handled during decompression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2188/">CVE-2015-2188</cve>
	<bugzilla href="https://bugzilla.suse.com/920696">SUSE bug 920696</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2189</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2189" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2189" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2189" ref_url="https://www.suse.com/security/cve/CVE-2015-2189" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0657-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0657-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001325.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0489-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00038.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via an invalid Interface Statistics Block (ISB) interface ID in a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2189/">CVE-2015-2189</cve>
	<bugzilla href="https://bugzilla.suse.com/920697">SUSE bug 920697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2190</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2190" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2190" ref_url="https://www.suse.com/security/cve/CVE-2015-2190" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0489-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00038.html" source="SUSE-SU"/>
    <description>
    epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet that is improperly handled by the LLDP dissector.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2190/">CVE-2015-2190</cve>
	<bugzilla href="https://bugzilla.suse.com/920698">SUSE bug 920698</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2191</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2191" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2191" ref_url="https://www.suse.com/security/cve/CVE-2015-2191" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0657-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0657-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001325.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0489-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00038.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2191/">CVE-2015-2191</cve>
	<bugzilla href="https://bugzilla.suse.com/920699">SUSE bug 920699</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2192</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2192" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2192" ref_url="https://www.suse.com/security/cve/CVE-2015-2192" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0489-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00038.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2192/">CVE-2015-2192</cve>
	<bugzilla href="https://bugzilla.suse.com/920700">SUSE bug 920700</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2221</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2221" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2221" ref_url="https://www.suse.com/security/cve/CVE-2015-2221" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001385.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001386.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html" source="SUSE-SU"/>
    <description>
    ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted y0da cryptor file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2221/">CVE-2015-2221</cve>
	<bugzilla href="https://bugzilla.suse.com/1040662">SUSE bug 1040662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/921950">SUSE bug 921950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922560">SUSE bug 922560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929192">SUSE bug 929192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2222</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2222" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2222" ref_url="https://www.suse.com/security/cve/CVE-2015-2222" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001385.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001386.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html" source="SUSE-SU"/>
    <description>
    ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted petite packed file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2222/">CVE-2015-2222</cve>
	<bugzilla href="https://bugzilla.suse.com/1040662">SUSE bug 1040662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/921950">SUSE bug 921950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922560">SUSE bug 922560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929192">SUSE bug 929192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2265</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2265" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2265" ref_url="https://www.suse.com/security/cve/CVE-2015-2265" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001367.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1244-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00033.html" source="SUSE-SU"/>
    <description>
    The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model or (2) PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2265/">CVE-2015-2265</cve>
	<bugzilla href="https://bugzilla.suse.com/921753">SUSE bug 921753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937018">SUSE bug 937018</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2278</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Module for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2278" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2278" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2278" ref_url="https://www.suse.com/security/cve/CVE-2015-2278" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001953.html" source="SUSE-SU"/>
    <description>
    The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server Java, Netweaver RFC SDK, GUI, RFC SDK, SAPCAR archive tool, and other products allows context-dependent attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to look-ups of non-simple codes, aka SAP Security Note 2124806, 2121661, 2127995, and 2125316.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2278/">CVE-2015-2278</cve>
	<bugzilla href="https://bugzilla.suse.com/935939">SUSE bug 935939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-sap-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009255507" comment="SUSE Linux Enterprise Module for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488104" comment="clamsap-0.99.25-2.37 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2282</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Module for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2282" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2282" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2282" ref_url="https://www.suse.com/security/cve/CVE-2015-2282" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001953.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server Java, Netweaver RFC SDK, GUI, RFC SDK, SAPCAR archive tool, and other products allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, aka SAP Security Note 2124806, 2121661, 2127995, and 2125316.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2282/">CVE-2015-2282</cve>
	<bugzilla href="https://bugzilla.suse.com/935939">SUSE bug 935939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-sap-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009255507" comment="SUSE Linux Enterprise Module for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488104" comment="clamsap-0.99.25-2.37 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2296</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2296" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2296" ref_url="https://www.suse.com/security/cve/CVE-2015-2296" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001801.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007049.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-2296/">CVE-2015-2296</cve>
	<bugzilla href="https://bugzilla.suse.com/922448">SUSE bug 922448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/926396">SUSE bug 926396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480895" comment="python3-pip-10.0.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481640" comment="python3-requests-2.20.0-4.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2304</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2304" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2304" ref_url="https://www.suse.com/security/cve/CVE-2015-2304" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001328.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0568-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2304/">CVE-2015-2304</cve>
	<bugzilla href="https://bugzilla.suse.com/920870">SUSE bug 920870</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2305</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2305" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2305" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2305" ref_url="https://www.suse.com/security/cve/CVE-2015-2305" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001385.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001386.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001426.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2305/">CVE-2015-2305</cve>
	<bugzilla href="https://bugzilla.suse.com/1040662">SUSE bug 1040662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/921950">SUSE bug 921950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922022">SUSE bug 922022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922028">SUSE bug 922028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922030">SUSE bug 922030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922043">SUSE bug 922043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922560">SUSE bug 922560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922567">SUSE bug 922567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929192">SUSE bug 929192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980366">SUSE bug 980366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2325</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2325" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2325" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2325" ref_url="https://www.suse.com/security/cve/CVE-2015-2325" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00076.html" source="SUSE-SU"/>
    <description>
    The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-2325/">CVE-2015-2325</cve>
	<bugzilla href="https://bugzilla.suse.com/924960">SUSE bug 924960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933288">SUSE bug 933288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936408">SUSE bug 936408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958373">SUSE bug 958373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334367" comment="java-11-openjdk is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334367" comment="java-11-openjdk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337974" comment="java-11-openjdk-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337975" comment="java-11-openjdk-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337976" comment="java-11-openjdk-headless is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480659" comment="libpcre16-0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480665" comment="libpcre2-16-0-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480666" comment="libpcre2-32-0-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480667" comment="libpcre2-8-0-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480660" comment="libpcrecpp0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480661" comment="libpcrecpp0-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480662" comment="libpcreposix0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480663" comment="pcre-devel-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480664" comment="pcre-tools-8.41-4.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482350" comment="libpcre2-posix2-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482351" comment="pcre2-devel-10.31-1.14 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152326" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2326</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2326" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2326" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2326" ref_url="https://www.suse.com/security/cve/CVE-2015-2326" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0858-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00020.html" source="SUSE-SU"/>
    <description>
    The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subroutine call and a recursive back reference, as demonstrated by "((?+1)(\1))/".
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-2326/">CVE-2015-2326</cve>
	<bugzilla href="https://bugzilla.suse.com/924960">SUSE bug 924960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924961">SUSE bug 924961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933288">SUSE bug 933288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936408">SUSE bug 936408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958373">SUSE bug 958373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334367" comment="java-11-openjdk is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334367" comment="java-11-openjdk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337974" comment="java-11-openjdk-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337975" comment="java-11-openjdk-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337976" comment="java-11-openjdk-headless is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480659" comment="libpcre16-0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480665" comment="libpcre2-16-0-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480666" comment="libpcre2-32-0-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480667" comment="libpcre2-8-0-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480660" comment="libpcrecpp0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480661" comment="libpcrecpp0-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480662" comment="libpcreposix0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480663" comment="pcre-devel-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480664" comment="pcre-tools-8.41-4.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482350" comment="libpcre2-posix2-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482351" comment="pcre2-devel-10.31-1.14 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152331" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2331</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2331" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2331" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2331" ref_url="https://www.suse.com/security/cve/CVE-2015-2331" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001329.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0615-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0644-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2331/">CVE-2015-2331</cve>
	<bugzilla href="https://bugzilla.suse.com/922894">SUSE bug 922894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923240">SUSE bug 923240</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480830" comment="libzip-devel-1.5.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2590</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2590" ref_url="https://www.suse.com/security/cve/CVE-2015-2590" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2590/">CVE-2015-2590</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2597</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2597" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2597" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2597" ref_url="https://www.suse.com/security/cve/CVE-2015-2597" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2597/">CVE-2015-2597</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2601</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2601" ref_url="https://www.suse.com/security/cve/CVE-2015-2601" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="TID7016694" ref_url="https://www.suse.com/support/kb/doc/?id=7016694" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2601/">CVE-2015-2601</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2613</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2613" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2613" ref_url="https://www.suse.com/security/cve/CVE-2015-2613" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2613/">CVE-2015-2613</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951727">SUSE bug 951727</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2619</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2619" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2619" ref_url="https://www.suse.com/security/cve/CVE-2015-2619" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2619/">CVE-2015-2619</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2621</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2621" ref_url="https://www.suse.com/security/cve/CVE-2015-2621" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2621/">CVE-2015-2621</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2625</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2625" ref_url="https://www.suse.com/security/cve/CVE-2015-2625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="TID7016694" ref_url="https://www.suse.com/support/kb/doc/?id=7016694" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2625/">CVE-2015-2625</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2627</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2627" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2627" ref_url="https://www.suse.com/security/cve/CVE-2015-2627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to installation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2627/">CVE-2015-2627</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2628</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2628" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2628" ref_url="https://www.suse.com/security/cve/CVE-2015-2628" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2628/">CVE-2015-2628</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2632</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2632" ref_url="https://www.suse.com/security/cve/CVE-2015-2632" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2632/">CVE-2015-2632</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2637</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2637" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2637" ref_url="https://www.suse.com/security/cve/CVE-2015-2637" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2637/">CVE-2015-2637</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2638</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2638" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2638" ref_url="https://www.suse.com/security/cve/CVE-2015-2638" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2638/">CVE-2015-2638</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2659</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2659" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2659" ref_url="https://www.suse.com/security/cve/CVE-2015-2659" source="SUSE CVE"/>
		<reference ref_id="TID7016694" ref_url="https://www.suse.com/support/kb/doc/?id=7016694" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vectors related to Security.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2659/">CVE-2015-2659</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2664</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2664" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2664" ref_url="https://www.suse.com/security/cve/CVE-2015-2664" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2664/">CVE-2015-2664</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2666</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2666" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2666" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2666" ref_url="https://www.suse.com/security/cve/CVE-2015-2666" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1071-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to the initrd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2666/">CVE-2015-2666</cve>
	<bugzilla href="https://bugzilla.suse.com/922944">SUSE bug 922944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939044">SUSE bug 939044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2668</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2668" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2668" ref_url="https://www.suse.com/security/cve/CVE-2015-2668" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001385.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001386.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html" source="SUSE-SU"/>
    <description>
    ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted xz archive file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2668/">CVE-2015-2668</cve>
	<bugzilla href="https://bugzilla.suse.com/1040662">SUSE bug 1040662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/921950">SUSE bug 921950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922560">SUSE bug 922560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929192">SUSE bug 929192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2694</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2694" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2694" ref_url="https://www.suse.com/security/cve/CVE-2015-2694" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001505.html" source="SUSE-SU"/>
    <description>
    The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2694/">CVE-2015-2694</cve>
	<bugzilla href="https://bugzilla.suse.com/928978">SUSE bug 928978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2695</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2695" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2695" ref_url="https://www.suse.com/security/cve/CVE-2015-2695" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1898-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001737.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1928-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html" source="SUSE-SU"/>
    <description>
    lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2695/">CVE-2015-2695</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952188">SUSE bug 952188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969771">SUSE bug 969771</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2696</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2696" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2696" ref_url="https://www.suse.com/security/cve/CVE-2015-2696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1928-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html" source="SUSE-SU"/>
    <description>
    lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mishandled during a gss_inquire_context call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2696/">CVE-2015-2696</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952189">SUSE bug 952189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954204">SUSE bug 954204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2697</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2697" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2697" ref_url="https://www.suse.com/security/cve/CVE-2015-2697" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1928-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html" source="SUSE-SU"/>
    <description>
    The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\0' character in a long realm field within a TGS request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2697/">CVE-2015-2697</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952190">SUSE bug 952190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2698</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2698" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2698" ref_url="https://www.suse.com/security/cve/CVE-2015-2698" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2055-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00124.html" source="SUSE-SU"/>
    <description>
    The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2698/">CVE-2015-2698</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954204">SUSE bug 954204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2706</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2706" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2706" ref_url="https://www.suse.com/security/cve/CVE-2015-2706" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0763-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00046.html" source="SUSE-SU"/>
    <description>
    Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted plugin that does not properly complete initialization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2706/">CVE-2015-2706</cve>
	<bugzilla href="https://bugzilla.suse.com/928116">SUSE bug 928116</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2708</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2708" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2708" ref_url="https://www.suse.com/security/cve/CVE-2015-2708" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2708/">CVE-2015-2708</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2709</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2709" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2709" ref_url="https://www.suse.com/security/cve/CVE-2015-2709" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2709/">CVE-2015-2709</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2710</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2710" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2710" ref_url="https://www.suse.com/security/cve/CVE-2015-2710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics data in conjunction with a crafted Cascading Style Sheets (CSS) token sequence.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2710/">CVE-2015-2710</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2711</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2711" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2711" ref_url="https://www.suse.com/security/cve/CVE-2015-2711" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META element in cases of context-menu navigation and middle-click navigation, which allows remote attackers to obtain sensitive information by reading web-server Referer logs that contain private data in a URL, as demonstrated by a private path component.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2711/">CVE-2015-2711</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2712</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2712" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2712" ref_url="https://www.suse.com/security/cve/CVE-2015-2712" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
    <description>
    The asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths during identification of cases in which bounds checking may be safely skipped, which allows remote attackers to trigger out-of-bounds write operations and possibly execute arbitrary code, or trigger out-of-bounds read operations and possibly obtain sensitive information from process memory, via crafted JavaScript.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2712/">CVE-2015-2712</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2713</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2713" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2713" ref_url="https://www.suse.com/security/cve/CVE-2015-2713" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2713/">CVE-2015-2713</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2715</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2715" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2715" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2715" ref_url="https://www.suse.com/security/cve/CVE-2015-2715" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
    <description>
    Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) by leveraging improper Media Decoder Thread creation at the time of a shutdown.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2715/">CVE-2015-2715</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152716" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2716</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2716" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2716" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2716" ref_url="https://www.suse.com/security/cve/CVE-2015-2716" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0935-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2716/">CVE-2015-2716</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980391">SUSE bug 980391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983985">SUSE bug 983985</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2717</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2717" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2717" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2717" ref_url="https://www.suse.com/security/cve/CVE-2015-2717" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and out-of-bounds read) via an MP4 video file containing invalid metadata.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2717/">CVE-2015-2717</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2718</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2718" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2718" ref_url="https://www.suse.com/security/cve/CVE-2015-2718" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0934-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html" source="SUSE-SU"/>
    <description>
    The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2718/">CVE-2015-2718</cve>
	<bugzilla href="https://bugzilla.suse.com/930622">SUSE bug 930622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2721</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2721" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2721" ref_url="https://www.suse.com/security/cve/CVE-2015-2721" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by blocking messages, as demonstrated by removing a forward-secrecy property by blocking a ServerKeyExchange message, aka a "SMACK SKIP-TLS" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2721/">CVE-2015-2721</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2722</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2722" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2722" ref_url="https://www.suse.com/security/cve/CVE-2015-2722" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2722/">CVE-2015-2722</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2724</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2724" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2724" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2724" ref_url="https://www.suse.com/security/cve/CVE-2015-2724" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-19"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2724/">CVE-2015-2724</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2725</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2725" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2725" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2725" ref_url="https://www.suse.com/security/cve/CVE-2015-2725" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2725/">CVE-2015-2725</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152726" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2726</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2726" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2726" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2726" ref_url="https://www.suse.com/security/cve/CVE-2015-2726" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-17"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2726/">CVE-2015-2726</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152727" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2727</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2727" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2727" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2727" ref_url="https://www.suse.com/security/cve/CVE-2015-2727" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions.  NOTE: this vulnerability exists because of a CVE-2015-0821 regression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2727/">CVE-2015-2727</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2728</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2728" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2728" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2728" ref_url="https://www.suse.com/security/cve/CVE-2015-2728" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 misinterprets an unspecified IDBDatabase field as a pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors, related to a "type confusion" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2728/">CVE-2015-2728</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2729</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2729" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2729" ref_url="https://www.suse.com/security/cve/CVE-2015-2729" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
    <description>
    The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2729/">CVE-2015-2729</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2730</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2730" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2730" ref_url="https://www.suse.com/security/cve/CVE-2015-2730" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2730/">CVE-2015-2730</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2731</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2731" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2731" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2731" ref_url="https://www.suse.com/security/cve/CVE-2015-2731" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers removal of a DOM object on the basis of a Content Policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2731/">CVE-2015-2731</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2733</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2733" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2733" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2733" ref_url="https://www.suse.com/security/cve/CVE-2015-2733" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2733/">CVE-2015-2733</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2734</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2734" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2734" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2734" ref_url="https://www.suse.com/security/cve/CVE-2015-2734" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2734/">CVE-2015-2734</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2735</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2735" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2735" ref_url="https://www.suse.com/security/cve/CVE-2015-2735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2735/">CVE-2015-2735</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2736</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2736" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2736" ref_url="https://www.suse.com/security/cve/CVE-2015-2736" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2736/">CVE-2015-2736</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2737</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2737" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2737" ref_url="https://www.suse.com/security/cve/CVE-2015-2737" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2737/">CVE-2015-2737</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2738</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2738" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2738" ref_url="https://www.suse.com/security/cve/CVE-2015-2738" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2738/">CVE-2015-2738</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2739</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2739" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2739" ref_url="https://www.suse.com/security/cve/CVE-2015-2739" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2739/">CVE-2015-2739</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2740</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2740" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2740" ref_url="https://www.suse.com/security/cve/CVE-2015-2740" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2740/">CVE-2015-2740</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2741</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2741" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2741" ref_url="https://www.suse.com/security/cve/CVE-2015-2741" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which allows user-assisted man-in-the-middle attackers to bypass intended access restrictions by triggering a (1) expired certificate or (2) mismatched hostname for a domain with pinning enabled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2741/">CVE-2015-2741</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2742</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2742" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2742" ref_url="https://www.suse.com/security/cve/CVE-2015-2742" source="SUSE CVE"/>
    <description>
    Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-18"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2742/">CVE-2015-2742</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2743</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2743" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2743" ref_url="https://www.suse.com/security/cve/CVE-2015-2743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
    <description>
    PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2743/">CVE-2015-2743</cve>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2806</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2806" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2806" ref_url="https://www.suse.com/security/cve/CVE-2015-2806" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001393.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001394.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001791.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0854-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00010.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2806/">CVE-2015-2806</cve>
	<bugzilla href="https://bugzilla.suse.com/924828">SUSE bug 924828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929414">SUSE bug 929414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961491">SUSE bug 961491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969208">SUSE bug 969208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481514" comment="libtasn1-4.13-4.2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481515" comment="libtasn1-6-4.13-4.2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481516" comment="libtasn1-6-32bit-4.13-4.2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481517" comment="libtasn1-devel-4.13-4.2.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2808</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2808" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2808" ref_url="https://www.suse.com/security/cve/CVE-2015-2808" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1073-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1086-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1161-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="TID7016694" ref_url="https://www.suse.com/support/kb/doc/?id=7016694" source="SUSE-SU"/>
		<reference ref_id="TID7017143" ref_url="https://www.suse.com/support/kb/doc/?id=7017143" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2808/">CVE-2015-2808</cve>
	<bugzilla href="https://bugzilla.suse.com/925378">SUSE bug 925378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952088">SUSE bug 952088</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152924" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2924</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-2924" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2924" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-2924" ref_url="https://www.suse.com/security/cve/CVE-2015-2924" source="SUSE CVE"/>
    <description>
    The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message, a similar issue to CVE-2015-2922.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2924/">CVE-2015-2924</cve>
	<bugzilla href="https://bugzilla.suse.com/926223">SUSE bug 926223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489051" comment="NetworkManager-lang-1.10.6-5.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481450" comment="libnm0-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481451" comment="typelib-1_0-NM-1_0-1.10.6-5.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486571" comment="NetworkManager-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486572" comment="NetworkManager-devel-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486573" comment="libnm-glib-vpn1-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486574" comment="libnm-glib4-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486575" comment="libnm-util2-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486576" comment="typelib-1_0-NMClient-1_0-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486577" comment="typelib-1_0-NetworkManager-1_0-1.10.6-5.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3138</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3138" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3138" ref_url="https://www.suse.com/security/cve/CVE-2015-3138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3138/">CVE-2015-3138</cve>
	<bugzilla href="https://bugzilla.suse.com/927637">SUSE bug 927637</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3143</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3143" ref_url="https://www.suse.com/security/cve/CVE-2015-3143" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html" source="SUSE-SU"/>
    <description>
    cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3143/">CVE-2015-3143</cve>
	<bugzilla href="https://bugzilla.suse.com/927556">SUSE bug 927556</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3144</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3144" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3144" ref_url="https://www.suse.com/security/cve/CVE-2015-3144" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html" source="SUSE-SU"/>
    <description>
    The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) or possibly have other unspecified impact via a zero-length host name, as demonstrated by "http://:80" and ":80."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3144/">CVE-2015-3144</cve>
	<bugzilla href="https://bugzilla.suse.com/927608">SUSE bug 927608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3145</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3145" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3145" ref_url="https://www.suse.com/security/cve/CVE-2015-3145" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html" source="SUSE-SU"/>
    <description>
    The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3145/">CVE-2015-3145</cve>
	<bugzilla href="https://bugzilla.suse.com/927607">SUSE bug 927607</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3146</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3146" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3146" ref_url="https://www.suse.com/security/cve/CVE-2015-3146" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1707-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001624.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00016.html" source="SUSE-SU"/>
    <description>
    The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted SSH packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3146/">CVE-2015-3146</cve>
	<bugzilla href="https://bugzilla.suse.com/928323">SUSE bug 928323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481496" comment="libssh-devel-0.8.4-8.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481497" comment="libssh4-0.8.4-8.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481498" comment="libssh4-32bit-0.8.4-8.26 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3148</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3148" ref_url="https://www.suse.com/security/cve/CVE-2015-3148" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html" source="SUSE-SU"/>
    <description>
    cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3148/">CVE-2015-3148</cve>
	<bugzilla href="https://bugzilla.suse.com/1092962">SUSE bug 1092962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927746">SUSE bug 927746</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3153</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3153" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3153" ref_url="https://www.suse.com/security/cve/CVE-2015-3153" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-May/001414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00017.html" source="SUSE-SU"/>
    <description>
    The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3153/">CVE-2015-3153</cve>
	<bugzilla href="https://bugzilla.suse.com/928533">SUSE bug 928533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3164</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3164" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3164" ref_url="https://www.suse.com/security/cve/CVE-2015-3164" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1095-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00044.html" source="SUSE-SU"/>
    <description>
    The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3164/">CVE-2015-3164</cve>
	<bugzilla href="https://bugzilla.suse.com/1177201">SUSE bug 1177201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934102">SUSE bug 934102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487792" comment="xorg-x11-server-sdk-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489170" comment="xorg-x11-server-wayland-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481676" comment="xorg-x11-server-1.20.3-12.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481677" comment="xorg-x11-server-extra-1.20.3-12.29 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3184</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3184" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3184" ref_url="https://www.suse.com/security/cve/CVE-2015-3184" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001560.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1401-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00111.html" source="SUSE-SU"/>
    <description>
    mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3184/">CVE-2015-3184</cve>
	<bugzilla href="https://bugzilla.suse.com/938723">SUSE bug 938723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939514">SUSE bug 939514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939516">SUSE bug 939516</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3185</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3185" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3185" ref_url="https://www.suse.com/security/cve/CVE-2015-3185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001653.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1684-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html" source="SUSE-SU"/>
    <description>
    The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-02-11"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3185/">CVE-2015-3185</cve>
	<bugzilla href="https://bugzilla.suse.com/938723">SUSE bug 938723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939514">SUSE bug 939514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939516">SUSE bug 939516</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333965" comment="apache2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335136" comment="apache2-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335131" comment="apache2-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335133" comment="apache2-prefork is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335134" comment="apache2-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335135" comment="apache2-worker is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3187</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3187" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3187" ref_url="https://www.suse.com/security/cve/CVE-2015-3187" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001560.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1401-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00111.html" source="SUSE-SU"/>
    <description>
    The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3187/">CVE-2015-3187</cve>
	<bugzilla href="https://bugzilla.suse.com/939517">SUSE bug 939517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3193</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3193" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3193" ref_url="https://www.suse.com/security/cve/CVE-2015-3193" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
    <description>
    The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3193/">CVE-2015-3193</cve>
	<bugzilla href="https://bugzilla.suse.com/1022086">SUSE bug 1022086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066242">SUSE bug 1066242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071906">SUSE bug 1071906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957814">SUSE bug 957814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960151">SUSE bug 960151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990370">SUSE bug 990370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3194</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3194" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3194" ref_url="https://www.suse.com/security/cve/CVE-2015-3194" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID7017046" ref_url="https://www.suse.com/support/kb/doc/?id=7017046" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2289-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2318-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1327-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
    <description>
    crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-3194/">CVE-2015-3194</cve>
	<bugzilla href="https://bugzilla.suse.com/957812">SUSE bug 957812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957815">SUSE bug 957815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958768">SUSE bug 958768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990370">SUSE bug 990370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3195</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3195" ref_url="https://www.suse.com/security/cve/CVE-2015-3195" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001730.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001758.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7014420" ref_url="https://www.suse.com/support/kb/doc/?id=7014420" source="SUSE-SU"/>
		<reference ref_id="TID7016875" ref_url="https://www.suse.com/support/kb/doc/?id=7016875" source="SUSE-SU"/>
		<reference ref_id="TID7017047" ref_url="https://www.suse.com/support/kb/doc/?id=7017047" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2289-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2318-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2349-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00103.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1327-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00073.html" source="SUSE-SU"/>
    <description>
    The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-3195/">CVE-2015-3195</cve>
	<bugzilla href="https://bugzilla.suse.com/923755">SUSE bug 923755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957812">SUSE bug 957812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957815">SUSE bug 957815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958768">SUSE bug 958768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963977">SUSE bug 963977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3196</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3196" ref_url="https://www.suse.com/security/cve/CVE-2015-3196" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001728.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2289-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html" source="SUSE-SU"/>
    <description>
    ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3196/">CVE-2015-3196</cve>
	<bugzilla href="https://bugzilla.suse.com/957813">SUSE bug 957813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3197</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3197" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3197" ref_url="https://www.suse.com/security/cve/CVE-2015-3197" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7017297" ref_url="https://www.suse.com/support/kb/doc?id=7017297" source="SUSE-SU"/>
		<reference ref_id="TID7017315" ref_url="https://www.suse.com/support/kb/doc/?id=7017315" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0362-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0442-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0720-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
    <description>
    ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3197/">CVE-2015-3197</cve>
	<bugzilla href="https://bugzilla.suse.com/963410">SUSE bug 963410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963415">SUSE bug 963415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968046">SUSE bug 968046</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3202</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3202" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3202" ref_url="https://www.suse.com/security/cve/CVE-2015-3202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001438.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0997-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1003-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00007.html" source="SUSE-SU"/>
    <description>
    fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3202/">CVE-2015-3202</cve>
	<bugzilla href="https://bugzilla.suse.com/931452">SUSE bug 931452</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481128" comment="fuse-2.9.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481129" comment="fuse-devel-2.9.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481130" comment="fuse-doc-2.9.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481131" comment="libfuse2-2.9.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481132" comment="libulockmgr1-2.9.7-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3209</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3209" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3209" ref_url="https://www.suse.com/security/cve/CVE-2015-3209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="TID7016590" ref_url="https://www.suse.com/support/kb/doc?id=7016590" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3209/">CVE-2015-3209</cve>
	<bugzilla href="https://bugzilla.suse.com/932267">SUSE bug 932267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932770">SUSE bug 932770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932823">SUSE bug 932823</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3217</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3217" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3217" ref_url="https://www.suse.com/security/cve/CVE-2015-3217" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2805-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00076.html" source="SUSE-SU"/>
    <description>
    PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3217/">CVE-2015-3217</cve>
	<bugzilla href="https://bugzilla.suse.com/933878">SUSE bug 933878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958373">SUSE bug 958373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335823" comment="libpcre1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335826" comment="libpcre1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335824" comment="libpcre16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335825" comment="libpcrecpp0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335827" comment="libpcrecpp0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335828" comment="libpcreposix0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335829" comment="pcre-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335831" comment="pcre-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654596" comment="libpcre2-16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654597" comment="libpcre2-32-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654598" comment="libpcre2-8-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654599" comment="libpcre2-posix2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654600" comment="pcre2-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480659" comment="libpcre16-0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480660" comment="libpcrecpp0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480661" comment="libpcrecpp0-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480662" comment="libpcreposix0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480663" comment="pcre-devel-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480664" comment="pcre-tools-8.41-4.20 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3218</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3218" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3218" ref_url="https://www.suse.com/security/cve/CVE-2015-3218" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001649.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1734-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html" source="SUSE-SU"/>
    <description>
    The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3218/">CVE-2015-3218</cve>
	<bugzilla href="https://bugzilla.suse.com/933922">SUSE bug 933922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943816">SUSE bug 943816</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481468" comment="libpolkit0-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481469" comment="polkit-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481470" comment="polkit-devel-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481471" comment="typelib-1_0-Polkit-1_0-0.114-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3223</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3223" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3223" ref_url="https://www.suse.com/security/cve/CVE-2015-3223" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
    <description>
    The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3223/">CVE-2015-3223</cve>
	<bugzilla href="https://bugzilla.suse.com/958581">SUSE bug 958581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481422" comment="libldb-devel-1.4.6-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481423" comment="libldb1-1.4.6-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481424" comment="libldb1-32bit-1.4.6-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481425" comment="python3-ldb-1.4.6-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481426" comment="python3-ldb-devel-1.4.6-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3228</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3228" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3228" ref_url="https://www.suse.com/security/cve/CVE-2015-3228" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0884-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1352-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0951-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3228/">CVE-2015-3228</cve>
	<bugzilla href="https://bugzilla.suse.com/939342">SUSE bug 939342</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153230" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3230</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3230" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3230" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3230" ref_url="https://www.suse.com/security/cve/CVE-2015-3230" source="SUSE CVE"/>
    <description>
    389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3230/">CVE-2015-3230</cve>
	<bugzilla href="https://bugzilla.suse.com/934934">SUSE bug 934934</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488105" comment="389-ds-1.4.0.3-2.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488106" comment="389-ds-devel-1.4.0.3-2.39 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3236</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3236" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3236" ref_url="https://www.suse.com/security/cve/CVE-2015-3236" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00054.html" source="SUSE-SU"/>
    <description>
    cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3236/">CVE-2015-3236</cve>
	<bugzilla href="https://bugzilla.suse.com/934501">SUSE bug 934501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3237</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3237" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3237" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3237" ref_url="https://www.suse.com/security/cve/CVE-2015-3237" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00054.html" source="SUSE-SU"/>
    <description>
    The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3237/">CVE-2015-3237</cve>
	<bugzilla href="https://bugzilla.suse.com/934502">SUSE bug 934502</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3238</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3238" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3238" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3238" ref_url="https://www.suse.com/security/cve/CVE-2015-3238" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1645-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002919.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
    <description>
    The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-3238/">CVE-2015-3238</cve>
	<bugzilla href="https://bugzilla.suse.com/1123794">SUSE bug 1123794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934920">SUSE bug 934920</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487778" comment="pam-devel-32bit-1.3.0-6.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481612" comment="pam-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481613" comment="pam-32bit-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481614" comment="pam-devel-1.3.0-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481615" comment="pam-doc-1.3.0-6.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3239</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3239" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3239" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3239" ref_url="https://www.suse.com/security/cve/CVE-2015-3239" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1245-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-01/msg00022.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-3239/">CVE-2015-3239</cve>
	<bugzilla href="https://bugzilla.suse.com/1122012">SUSE bug 1122012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936786">SUSE bug 936786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480769" comment="libunwind-1.2.1-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480770" comment="libunwind-devel-1.2.1-2.13 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3243</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3243" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3243" ref_url="https://www.suse.com/security/cve/CVE-2015-3243" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1937-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004262.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004480.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00001.html" source="SUSE-SU"/>
    <description>
    rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3243/">CVE-2015-3243</cve>
	<bugzilla href="https://bugzilla.suse.com/1098851">SUSE bug 1098851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126233">SUSE bug 1126233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935393">SUSE bug 935393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674339" comment="rsyslog-8.33.1-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334582" comment="rsyslog is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336378" comment="rsyslog-module-gssapi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336379" comment="rsyslog-module-gtls is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694245" comment="rsyslog-module-mmnormalize is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336380" comment="rsyslog-module-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336381" comment="rsyslog-module-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336382" comment="rsyslog-module-relp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336383" comment="rsyslog-module-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336384" comment="rsyslog-module-udpspoof is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790303" comment="rsyslog-module-gssapi-8.33.1-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790304" comment="rsyslog-module-gtls-8.33.1-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790305" comment="rsyslog-module-mysql-8.33.1-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790306" comment="rsyslog-module-pgsql-8.33.1-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790307" comment="rsyslog-module-relp-8.33.1-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790308" comment="rsyslog-module-snmp-8.33.1-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790309" comment="rsyslog-module-udpspoof-8.33.1-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3247</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3247" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3247" ref_url="https://www.suse.com/security/cve/CVE-2015-3247" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1566-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1750-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00032.html" source="SUSE-SU"/>
    <description>
    Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-3247/">CVE-2015-3247</cve>
	<bugzilla href="https://bugzilla.suse.com/944460">SUSE bug 944460</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488364" comment="libspice-server-devel-0.14.1-2.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488365" comment="libspice-server1-0.14.1-2.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3255</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3255" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3255" ref_url="https://www.suse.com/security/cve/CVE-2015-3255" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001649.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1734-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html" source="SUSE-SU"/>
    <description>
    The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3255/">CVE-2015-3255</cve>
	<bugzilla href="https://bugzilla.suse.com/939246">SUSE bug 939246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943816">SUSE bug 943816</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481468" comment="libpolkit0-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481469" comment="polkit-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481470" comment="polkit-devel-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481471" comment="typelib-1_0-Polkit-1_0-0.114-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3256</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3256" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3256" ref_url="https://www.suse.com/security/cve/CVE-2015-3256" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001649.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1734-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html" source="SUSE-SU"/>
    <description>
    PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory corruption and polkitd daemon crash) and possibly gain privileges via unspecified vectors, related to "javascript rule evaluation."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3256/">CVE-2015-3256</cve>
	<bugzilla href="https://bugzilla.suse.com/943816">SUSE bug 943816</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481468" comment="libpolkit0-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481469" comment="polkit-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481470" comment="polkit-devel-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481471" comment="typelib-1_0-Polkit-1_0-0.114-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3258</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3258" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3258" ref_url="https://www.suse.com/security/cve/CVE-2015-3258" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1244-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00033.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3258/">CVE-2015-3258</cve>
	<bugzilla href="https://bugzilla.suse.com/921753">SUSE bug 921753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936281">SUSE bug 936281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937018">SUSE bug 937018</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3259</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3259" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3259" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3259" ref_url="https://www.suse.com/security/cve/CVE-2015-3259" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1479-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators to gain privileges via a long configuration argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3259/">CVE-2015-3259</cve>
	<bugzilla href="https://bugzilla.suse.com/935634">SUSE bug 935634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936281">SUSE bug 936281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937018">SUSE bug 937018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153279" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3279</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3279" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3279" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3279" ref_url="https://www.suse.com/security/cve/CVE-2015-3279" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1244-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00033.html" source="SUSE-SU"/>
    <description>
    Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3279/">CVE-2015-3279</cve>
	<bugzilla href="https://bugzilla.suse.com/921753">SUSE bug 921753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936281">SUSE bug 936281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937018">SUSE bug 937018</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3288</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3288" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3288" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3288" ref_url="https://www.suse.com/security/cve/CVE-2015-3288" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1613-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2342-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
    <description>
    mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of service (page tainting) via a crafted application that triggers writing to page zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-3288/">CVE-2015-3288</cve>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979021">SUSE bug 979021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3290</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3290" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3290" ref_url="https://www.suse.com/security/cve/CVE-2015-3290" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00024.html" source="SUSE-SU"/>
    <description>
    arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly relies on espfix64 during nested NMI processing, which allows local users to gain privileges by triggering an NMI within a certain instruction window.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3290/">CVE-2015-3290</cve>
	<bugzilla href="https://bugzilla.suse.com/937969">SUSE bug 937969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937970">SUSE bug 937970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938706">SUSE bug 938706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939207">SUSE bug 939207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939269">SUSE bug 939269</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3291</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3291" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3291" ref_url="https://www.suse.com/security/cve/CVE-2015-3291" source="SUSE CVE"/>
    <description>
    arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service (skipped NMI) by modifying the rsp register, issuing a syscall instruction, and triggering an NMI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-3291/">CVE-2015-3291</cve>
	<bugzilla href="https://bugzilla.suse.com/937969">SUSE bug 937969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937970">SUSE bug 937970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938706">SUSE bug 938706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3294</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3294" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3294" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3294" ref_url="https://www.suse.com/security/cve/CVE-2015-3294" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0979-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0979-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0857-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00013.html" source="SUSE-SU"/>
    <description>
    The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3294/">CVE-2015-3294</cve>
	<bugzilla href="https://bugzilla.suse.com/923144">SUSE bug 923144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928867">SUSE bug 928867</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481098" comment="dnsmasq-2.78-5.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3310</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3310" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3310" ref_url="https://www.suse.com/security/cve/CVE-2015-3310" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002649.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00147.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3310/">CVE-2015-3310</cve>
	<bugzilla href="https://bugzilla.suse.com/927841">SUSE bug 927841</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486524" comment="ppp-2.4.7-3.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486525" comment="ppp-devel-2.4.7-3.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153331" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3331</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3331" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3331" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3331" ref_url="https://www.suse.com/security/cve/CVE-2015-3331" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1071-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1488-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3331/">CVE-2015-3331</cve>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927257">SUSE bug 927257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/931231">SUSE bug 931231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939262">SUSE bug 939262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3340</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3340" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3340" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3340" ref_url="https://www.suse.com/security/cve/CVE-2015-3340" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0923-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0940-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0944-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3340/">CVE-2015-3340</cve>
	<bugzilla href="https://bugzilla.suse.com/927967">SUSE bug 927967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/929339">SUSE bug 929339</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3414</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3414" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3414" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3414" ref_url="https://www.suse.com/security/cve/CVE-2015-3414" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-3414/">CVE-2015-3414</cve>
	<bugzilla href="https://bugzilla.suse.com/1085790">SUSE bug 1085790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190372">SUSE bug 1190372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193078">SUSE bug 1193078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928700">SUSE bug 928700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928701">SUSE bug 928701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928702">SUSE bug 928702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009624167" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624168" comment="sqlite3-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624169" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009624170" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624171" comment="sqlite3-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624172" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009624968" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624969" comment="sqlite3-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624970" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3415</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3415" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3415" ref_url="https://www.suse.com/security/cve/CVE-2015-3415" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:268-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009180.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009181.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009274.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009448.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014597.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1283-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009207.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009509.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1058-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2320-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JD4EZ74IZ57MKTDKDVIUAIG6VCAEKMD5/" source="SUSE-SU"/>
    <description>
    The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&amp;O&gt;O) in a CREATE TABLE statement.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-3415/">CVE-2015-3415</cve>
	<bugzilla href="https://bugzilla.suse.com/1190372">SUSE bug 1190372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928700">SUSE bug 928700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928701">SUSE bug 928701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928702">SUSE bug 928702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009624167" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624168" comment="sqlite3-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624169" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009624170" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624171" comment="sqlite3-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624172" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009624968" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624969" comment="sqlite3-3.36.0-3.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624970" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3416</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3416" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3416" ref_url="https://www.suse.com/security/cve/CVE-2015-3416" source="SUSE CVE"/>
    <description>
    The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-3416/">CVE-2015-3416</cve>
	<bugzilla href="https://bugzilla.suse.com/1190372">SUSE bug 1190372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928700">SUSE bug 928700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928701">SUSE bug 928701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928702">SUSE bug 928702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333983" comment="sqlite3 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335190" comment="libsqlite3-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335191" comment="libsqlite3-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333983" comment="sqlite3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335192" comment="sqlite3-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009714563" comment="sqlite3-tcl is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335190" comment="libsqlite3-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335191" comment="libsqlite3-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333983" comment="sqlite3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335192" comment="sqlite3-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335190" comment="libsqlite3-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335191" comment="libsqlite3-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333983" comment="sqlite3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335192" comment="sqlite3-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009714563" comment="sqlite3-tcl is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3420</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3420" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3420" ref_url="https://www.suse.com/security/cve/CVE-2015-3420" source="SUSE CVE"/>
    <description>
    The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service (login process crash) via vectors related to handshake failures.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3420/">CVE-2015-3420</cve>
	<bugzilla href="https://bugzilla.suse.com/928886">SUSE bug 928886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334163" comment="dovecot is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3451</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3451" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3451" ref_url="https://www.suse.com/security/cve/CVE-2015-3451" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001553.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1506-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00006.html" source="SUSE-SU"/>
    <description>
    The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3451/">CVE-2015-3451</cve>
	<bugzilla href="https://bugzilla.suse.com/929237">SUSE bug 929237</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480875" comment="perl-XML-LibXML-2.0132-1.20 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3456</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3456" ref_url="https://www.suse.com/security/cve/CVE-2015-3456" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0889-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0889-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0923-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0927-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0940-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0943-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0944-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="TID7016497" ref_url="https://www.suse.com/support/kb/doc?id=7016497" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1400-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00021.html" source="SUSE-SU"/>
    <description>
    The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3456/">CVE-2015-3456</cve>
	<bugzilla href="https://bugzilla.suse.com/929339">SUSE bug 929339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932770">SUSE bug 932770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935900">SUSE bug 935900</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3622</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3622" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3622" ref_url="https://www.suse.com/security/cve/CVE-2015-3622" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001582.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1674-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00097.html" source="SUSE-SU"/>
    <description>
    The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3622/">CVE-2015-3622</cve>
	<bugzilla href="https://bugzilla.suse.com/929414">SUSE bug 929414</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481514" comment="libtasn1-4.13-4.2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481515" comment="libtasn1-6-4.13-4.2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481516" comment="libtasn1-6-32bit-4.13-4.2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481517" comment="libtasn1-devel-4.13-4.2.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3627</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3627" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3627" ref_url="https://www.suse.com/security/cve/CVE-2015-3627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001419.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0905-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html" source="SUSE-SU"/>
    <description>
    Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-20"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3627/">CVE-2015-3627</cve>
	<bugzilla href="https://bugzilla.suse.com/930235">SUSE bug 930235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945060">SUSE bug 945060</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3629</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3629" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3629" ref_url="https://www.suse.com/security/cve/CVE-2015-3629" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001419.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0905-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html" source="SUSE-SU"/>
    <description>
    Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-24"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3629/">CVE-2015-3629</cve>
	<bugzilla href="https://bugzilla.suse.com/930235">SUSE bug 930235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945060">SUSE bug 945060</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3630</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3630" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3630" ref_url="https://www.suse.com/security/cve/CVE-2015-3630" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001419.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0905-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html" source="SUSE-SU"/>
    <description>
    Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-17"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3630/">CVE-2015-3630</cve>
	<bugzilla href="https://bugzilla.suse.com/930235">SUSE bug 930235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945060">SUSE bug 945060</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3631</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3631" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3631" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3631" ref_url="https://www.suse.com/security/cve/CVE-2015-3631" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001419.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0905-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00023.html" source="SUSE-SU"/>
    <description>
    Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3631/">CVE-2015-3631</cve>
	<bugzilla href="https://bugzilla.suse.com/930235">SUSE bug 930235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945060">SUSE bug 945060</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3636</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3636" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3636" ref_url="https://www.suse.com/security/cve/CVE-2015-3636" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1071-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1376-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1488-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1491-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3636/">CVE-2015-3636</cve>
	<bugzilla href="https://bugzilla.suse.com/929525">SUSE bug 929525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939277">SUSE bug 939277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994624">SUSE bug 994624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3808</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3808" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3808" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3808" ref_url="https://www.suse.com/security/cve/CVE-2015-3808" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0936-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00038.html" source="SUSE-SU"/>
    <description>
    The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3808/">CVE-2015-3808</cve>
	<bugzilla href="https://bugzilla.suse.com/930689">SUSE bug 930689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3809</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3809" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3809" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3809" ref_url="https://www.suse.com/security/cve/CVE-2015-3809" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0936-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00038.html" source="SUSE-SU"/>
    <description>
    The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3809/">CVE-2015-3809</cve>
	<bugzilla href="https://bugzilla.suse.com/930689">SUSE bug 930689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3810</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3810" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3810" ref_url="https://www.suse.com/security/cve/CVE-2015-3810" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0936-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00038.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3810/">CVE-2015-3810</cve>
	<bugzilla href="https://bugzilla.suse.com/930689">SUSE bug 930689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3811</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3811" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3811" ref_url="https://www.suse.com/security/cve/CVE-2015-3811" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001448.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0936-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0937-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00039.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, a different vulnerability than CVE-2015-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3811/">CVE-2015-3811</cve>
	<bugzilla href="https://bugzilla.suse.com/930689">SUSE bug 930689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930691">SUSE bug 930691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3812</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3812" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3812" ref_url="https://www.suse.com/security/cve/CVE-2015-3812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001448.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0936-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0937-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00039.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers to cause a denial of service (memory consumption) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3812/">CVE-2015-3812</cve>
	<bugzilla href="https://bugzilla.suse.com/930689">SUSE bug 930689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930691">SUSE bug 930691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3813</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3813" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3813" ref_url="https://www.suse.com/security/cve/CVE-2015-3813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1676-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001625.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0936-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00038.html" source="SUSE-SU"/>
    <description>
    The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine the defragmentation state in a case of an insufficient snapshot length, which allows remote attackers to cause a denial of service (memory consumption) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3813/">CVE-2015-3813</cve>
	<bugzilla href="https://bugzilla.suse.com/930689">SUSE bug 930689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3814</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3814" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3814" ref_url="https://www.suse.com/security/cve/CVE-2015-3814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1098-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-June/001448.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0936-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0937-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00039.html" source="SUSE-SU"/>
    <description>
    The (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 interpret a zero value as a length rather than an error condition, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3814/">CVE-2015-3814</cve>
	<bugzilla href="https://bugzilla.suse.com/930689">SUSE bug 930689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930691">SUSE bug 930691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3815</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3815" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3815" ref_url="https://www.suse.com/security/cve/CVE-2015-3815" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:0936-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00038.html" source="SUSE-SU"/>
    <description>
    The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than CVE-2015-3906.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3815/">CVE-2015-3815</cve>
	<bugzilla href="https://bugzilla.suse.com/930689">SUSE bug 930689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3885</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3885" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3885" ref_url="https://www.suse.com/security/cve/CVE-2015-3885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003170.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0931-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00033.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3885/">CVE-2015-3885</cve>
	<bugzilla href="https://bugzilla.suse.com/930683">SUSE bug 930683</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337186" comment="libnetpbm-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009679265" comment="libnetpbm11 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334257" comment="netpbm is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3900</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3900" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3900" ref_url="https://www.suse.com/security/cve/CVE-2015-3900" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00034.html" source="SUSE-SU"/>
    <description>
    RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hijack attack."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-09-13"/>
	<updated date="2023-09-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3900/">CVE-2015-3900</cve>
	<bugzilla href="https://bugzilla.suse.com/936032">SUSE bug 936032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348236" comment="libruby2_5-2_5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348228" comment="ruby2.5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348237" comment="ruby2.5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348238" comment="ruby2.5-devel-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348239" comment="ruby2.5-stdlib is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3991</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-3991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3991" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-3991" ref_url="https://www.suse.com/security/cve/CVE-2015-3991" source="SUSE CVE"/>
    <description>
    strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3991/">CVE-2015-3991</cve>
	<bugzilla href="https://bugzilla.suse.com/931272">SUSE bug 931272</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4000</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4000" ref_url="https://www.suse.com/security/cve/CVE-2015-4000" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1177-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1181-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1183-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1184-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1268-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1547-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1581-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1663-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001616.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0224-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004209.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0586-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013955.html" source="SUSE-SU"/>
		<reference ref_id="TID7010166" ref_url="https://www.suse.com/support/kb/doc/?id=7010166" source="SUSE-SU"/>
		<reference ref_id="TID7016528" ref_url="https://www.suse.com/support/kb/doc/?id=7016528" source="SUSE-SU"/>
		<reference ref_id="TID7016529" ref_url="https://www.suse.com/support/kb/doc?id=7016529" source="SUSE-SU"/>
		<reference ref_id="TID7016539" ref_url="https://www.suse.com/support/kb/doc/?id=7016539" source="SUSE-SU"/>
		<reference ref_id="TID7016657" ref_url="https://www.suse.com/support/kb/doc/?id=7016657" source="SUSE-SU"/>
		<reference ref_id="TID7016694" ref_url="https://www.suse.com/support/kb/doc/?id=7016694" source="SUSE-SU"/>
		<reference ref_id="TID7016726" ref_url="https://www.suse.com/support/kb/doc/?id=7016726" source="SUSE-SU"/>
		<reference ref_id="TID7016795" ref_url="https://www.suse.com/support/kb/doc/?id=7016795" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021433" ref_url="https://www.suse.com/support/kb/doc/?id=7021433" source="SUSE-SU"/>
		<reference ref_id="TID7021435" ref_url="https://www.suse.com/support/kb/doc/?id=7021435" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021743" ref_url="https://www.suse.com/support/kb/doc/?id=7021743" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021836" ref_url="https://www.suse.com/support/kb/doc/?id=7021836" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021978" ref_url="https://www.suse.com/support/kb/doc/?id=7021978" source="SUSE-SU"/>
		<reference ref_id="TID7021993" ref_url="https://www.suse.com/support/kb/doc/?id=7021993" source="SUSE-SU"/>
		<reference ref_id="TID7021994" ref_url="https://www.suse.com/support/kb/doc/?id=7021994" source="SUSE-SU"/>
		<reference ref_id="TID7021995" ref_url="https://www.suse.com/support/kb/doc/?id=7021995" source="SUSE-SU"/>
		<reference ref_id="TID7022026" ref_url="https://www.suse.com/support/kb/doc/?id=7022026" source="SUSE-SU"/>
		<reference ref_id="TID7022077" ref_url="https://www.suse.com/support/kb/doc/?id=7022077" source="SUSE-SU"/>
		<reference ref_id="TID7022095" ref_url="https://www.suse.com/support/kb/doc/?id=7022095" source="SUSE-SU"/>
		<reference ref_id="TID7022096" ref_url="https://www.suse.com/support/kb/doc/?id=7022096" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1209-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1684-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0478-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0483-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2267-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00034.html" source="SUSE-SU"/>
    <description>
    The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-4000/">CVE-2015-4000</cve>
	<bugzilla href="https://bugzilla.suse.com/1074631">SUSE bug 1074631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211968">SUSE bug 1211968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/931600">SUSE bug 931600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/931698">SUSE bug 931698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/931723">SUSE bug 931723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/931845">SUSE bug 931845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932026">SUSE bug 932026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/932483">SUSE bug 932483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934789">SUSE bug 934789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935033">SUSE bug 935033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935540">SUSE bug 935540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935979">SUSE bug 935979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937202">SUSE bug 937202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937766">SUSE bug 937766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938432">SUSE bug 938432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938905">SUSE bug 938905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938906">SUSE bug 938906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938913">SUSE bug 938913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938945">SUSE bug 938945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943664">SUSE bug 943664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944729">SUSE bug 944729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945582">SUSE bug 945582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955589">SUSE bug 955589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980406">SUSE bug 980406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990592">SUSE bug 990592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994144">SUSE bug 994144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481656" comment="socat-1.7.3.2-4.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4020</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4020" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4020" ref_url="https://www.suse.com/security/cve/CVE-2015-4020" source="SUSE CVE"/>
    <description>
    RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x before 2.4.8 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record with a domain that is suffixed with the original domain name, aka a "DNS hijack attack." NOTE: this vulnerability exists because to an incomplete fix for CVE-2015-3900.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-09-13"/>
	<updated date="2023-09-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4020/">CVE-2015-4020</cve>
	<bugzilla href="https://bugzilla.suse.com/1215235">SUSE bug 1215235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936032">SUSE bug 936032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348236" comment="libruby2_5-2_5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348228" comment="ruby2.5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348237" comment="ruby2.5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348238" comment="ruby2.5-devel-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348239" comment="ruby2.5-stdlib is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4037</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4037" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4037" ref_url="https://www.suse.com/security/cve/CVE-2015-4037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="TID7016590" ref_url="https://www.suse.com/support/kb/doc?id=7016590" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
    <description>
    The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.*-* files before the program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-4037/">CVE-2015-4037</cve>
	<bugzilla href="https://bugzilla.suse.com/932267">SUSE bug 932267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4041</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4041" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4041" ref_url="https://www.suse.com/security/cve/CVE-2015-4041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001604.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1059-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00030.html" source="SUSE-SU"/>
    <description>
    The keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering the number of bytes occupied by multibyte characters, which allows attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via long UTF-8 strings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-4041/">CVE-2015-4041</cve>
	<bugzilla href="https://bugzilla.suse.com/928749">SUSE bug 928749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480143" comment="coreutils-8.29-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480144" comment="coreutils-lang-8.29-2.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4042</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4042" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4042" ref_url="https://www.suse.com/security/cve/CVE-2015-4042" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001604.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1059-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00030.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service (application crash) or possibly have unspecified other impact via long strings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-4042/">CVE-2015-4042</cve>
	<bugzilla href="https://bugzilla.suse.com/1167100">SUSE bug 1167100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928749">SUSE bug 928749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480143" comment="coreutils-8.29-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480144" comment="coreutils-lang-8.29-2.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4103</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4103" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4103" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4103" ref_url="https://www.suse.com/security/cve/CVE-2015-4103" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="TID7016590" ref_url="https://www.suse.com/support/kb/doc?id=7016590" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4103/">CVE-2015-4103</cve>
	<bugzilla href="https://bugzilla.suse.com/931625">SUSE bug 931625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4104</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4104" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4104" ref_url="https://www.suse.com/security/cve/CVE-2015-4104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="TID7016590" ref_url="https://www.suse.com/support/kb/doc?id=7016590" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service (unexpected interrupt and host crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4104/">CVE-2015-4104</cve>
	<bugzilla href="https://bugzilla.suse.com/931626">SUSE bug 931626</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4105</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4105" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4105" ref_url="https://www.suse.com/security/cve/CVE-2015-4105" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="TID7016590" ref_url="https://www.suse.com/support/kb/doc?id=7016590" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to cause a denial of service (host disk consumption) via certain invalid operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4105/">CVE-2015-4105</cve>
	<bugzilla href="https://bugzilla.suse.com/931627">SUSE bug 931627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4106</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4106" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4106" ref_url="https://www.suse.com/security/cve/CVE-2015-4106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="TID7016590" ref_url="https://www.suse.com/support/kb/doc?id=7016590" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1092-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
    <description>
    QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4106/">CVE-2015-4106</cve>
	<bugzilla href="https://bugzilla.suse.com/931628">SUSE bug 931628</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4141</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4141" ref_url="https://www.suse.com/security/cve/CVE-2015-4141" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4141/">CVE-2015-4141</cve>
	<bugzilla href="https://bugzilla.suse.com/915323">SUSE bug 915323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930077">SUSE bug 930077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334146" comment="wpa_supplicant is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4142</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4142" ref_url="https://www.suse.com/security/cve/CVE-2015-4142" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4142/">CVE-2015-4142</cve>
	<bugzilla href="https://bugzilla.suse.com/915323">SUSE bug 915323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930078">SUSE bug 930078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334489" comment="wpa_supplicant is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4143</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4143" ref_url="https://www.suse.com/security/cve/CVE-2015-4143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4143/">CVE-2015-4143</cve>
	<bugzilla href="https://bugzilla.suse.com/930079">SUSE bug 930079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334146" comment="wpa_supplicant is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4144</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4144" ref_url="https://www.suse.com/security/cve/CVE-2015-4144" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
    <description>
    The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service (crash) via a crafted message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4144/">CVE-2015-4144</cve>
	<bugzilla href="https://bugzilla.suse.com/930079">SUSE bug 930079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334146" comment="wpa_supplicant is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481672" comment="wpa_supplicant-2.6-4.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4145</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4145" ref_url="https://www.suse.com/security/cve/CVE-2015-4145" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
    <description>
    The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to cause a denial of service (memory leak) via a crafted message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4145/">CVE-2015-4145</cve>
	<bugzilla href="https://bugzilla.suse.com/930079">SUSE bug 930079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334146" comment="wpa_supplicant is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481672" comment="wpa_supplicant-2.6-4.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4146</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4146" ref_url="https://www.suse.com/security/cve/CVE-2015-4146" source="SUSE CVE"/>
    <description>
    The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service (crash) via a crafted message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4146/">CVE-2015-4146</cve>
	<bugzilla href="https://bugzilla.suse.com/930079">SUSE bug 930079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334146" comment="wpa_supplicant is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481672" comment="wpa_supplicant-2.6-4.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4167</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4167" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4167" ref_url="https://www.suse.com/security/cve/CVE-2015-4167" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1678-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001611.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate certain length values, which allows local users to cause a denial of service (incorrect data representation or integer overflow, and OOPS) via a crafted UDF filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4167/">CVE-2015-4167</cve>
	<bugzilla href="https://bugzilla.suse.com/917839">SUSE bug 917839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933907">SUSE bug 933907</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4171</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4171" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4171" ref_url="https://www.suse.com/security/cve/CVE-2015-4171" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1227-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001492.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1228-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001493.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001641.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1082-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00040.html" source="SUSE-SU"/>
    <description>
    strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtain credentials by using a valid certificate and then reading the responses.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-4171/">CVE-2015-4171</cve>
	<bugzilla href="https://bugzilla.suse.com/931845">SUSE bug 931845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933591">SUSE bug 933591</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4467</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4467" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4467" ref_url="https://www.suse.com/security/cve/CVE-2015-4467" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001720.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001776.html" source="SUSE-SU"/>
    <description>
    The chmd_init_decomp function in chmd.c in libmspack before 0.5 does not properly validate the reset interval, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted CHM file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4467/">CVE-2015-4467</cve>
	<bugzilla href="https://bugzilla.suse.com/934524">SUSE bug 934524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934525">SUSE bug 934525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934529">SUSE bug 934529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934533">SUSE bug 934533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334260" comment="cabextract is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4473</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4473" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4473" ref_url="https://www.suse.com/security/cve/CVE-2015-4473" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4473/">CVE-2015-4473</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4474</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4474" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4474" ref_url="https://www.suse.com/security/cve/CVE-2015-4474" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4474/">CVE-2015-4474</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4475</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4475" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4475" ref_url="https://www.suse.com/security/cve/CVE-2015-4475" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a malformed file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4475/">CVE-2015-4475</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4476</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4476" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4476" ref_url="https://www.suse.com/security/cve/CVE-2015-4476" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar attributes by leveraging lack of navigation after a paste of a URL with a nonstandard scheme, as demonstrated by spoofing an SSL attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4476/">CVE-2015-4476</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4477</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4477" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4477" ref_url="https://www.suse.com/security/cve/CVE-2015-4477" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4477/">CVE-2015-4477</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4478</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4478" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4478" ref_url="https://www.suse.com/security/cve/CVE-2015-4478" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver parameter to the JSON.parse method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4478/">CVE-2015-4478</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4479</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4479" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4479" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4479" ref_url="https://www.suse.com/security/cve/CVE-2015-4479" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4479/">CVE-2015-4479</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4480</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4480" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4480" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4480" ref_url="https://www.suse.com/security/cve/CVE-2015-4480" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4480/">CVE-2015-4480</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4481</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4481" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4481" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4481" ref_url="https://www.suse.com/security/cve/CVE-2015-4481" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file during an update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-4481/">CVE-2015-4481</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4482</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4482" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4482" ref_url="https://www.suse.com/security/cve/CVE-2015-4482" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    mar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows local users to gain privileges or cause a denial of service (out-of-bounds write) via a crafted name of a Mozilla Archive (aka MAR) file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4482/">CVE-2015-4482</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4483</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4483" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4483" ref_url="https://www.suse.com/security/cve/CVE-2015-4483" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4483/">CVE-2015-4483</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4484</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4484" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4484" ref_url="https://www.suse.com/security/cve/CVE-2015-4484" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to cause a denial of service (application crash) by leveraging the use of shared memory and accessing (1) an Atomics object or (2) a SharedArrayBuffer object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4484/">CVE-2015-4484</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4485</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4485" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4485" ref_url="https://www.suse.com/security/cve/CVE-2015-4485" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4485/">CVE-2015-4485</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4486</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4486" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4486" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4486" ref_url="https://www.suse.com/security/cve/CVE-2015-4486" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4486/">CVE-2015-4486</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4487</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4487" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4487" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4487" ref_url="https://www.suse.com/security/cve/CVE-2015-4487" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4487/">CVE-2015-4487</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4488</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4488" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4488" ref_url="https://www.suse.com/security/cve/CVE-2015-4488" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4488/">CVE-2015-4488</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4489</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4489" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4489" ref_url="https://www.suse.com/security/cve/CVE-2015-4489" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging a self assignment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4489/">CVE-2015-4489</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4490</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4490" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4490" ref_url="https://www.suse.com/security/cve/CVE-2015-4490" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
    <description>
    The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Policy Level 2 exceptions for the blob, data, and filesystem URL schemes during wildcard source-expression matching, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging unexpected policy-enforcement behavior.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4490/">CVE-2015-4490</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4491</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4491" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4491" ref_url="https://www.suse.com/security/cve/CVE-2015-4491" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001719.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2195-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001761.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2145-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004361.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1500-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00033.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4491/">CVE-2015-4491</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942801">SUSE bug 942801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/948790">SUSE bug 948790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480251" comment="gdk-pixbuf-devel-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480252" comment="gdk-pixbuf-lang-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480253" comment="gdk-pixbuf-query-loaders-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480254" comment="gdk-pixbuf-thumbnailer-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480255" comment="libgdk_pixbuf-2_0-0-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480256" comment="typelib-1_0-GdkPixbuf-2_0-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482688" comment="gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482689" comment="libgdk_pixbuf-2_0-0-32bit-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4492</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4492" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4492" ref_url="https://www.suse.com/security/cve/CVE-2015-4492" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4492/">CVE-2015-4492</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4493</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4493" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4493" ref_url="https://www.suse.com/security/cve/CVE-2015-4493" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1453-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1454-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to CVE-2015-1539.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4493/">CVE-2015-4493</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4495</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4495" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4495" ref_url="https://www.suse.com/security/cve/CVE-2015-4495" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1449-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html" source="SUSE-SU"/>
    <description>
    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4495/">CVE-2015-4495</cve>
	<bugzilla href="https://bugzilla.suse.com/940806">SUSE bug 940806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/940918">SUSE bug 940918</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4497</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4497" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4497" ref_url="https://www.suse.com/security/cve/CVE-2015-4497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1504-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-11"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4497/">CVE-2015-4497</cve>
	<bugzilla href="https://bugzilla.suse.com/943550">SUSE bug 943550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943557">SUSE bug 943557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943608">SUSE bug 943608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4498</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4498" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4498" ref_url="https://www.suse.com/security/cve/CVE-2015-4498" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1504-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00000.html" source="SUSE-SU"/>
    <description>
    The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4498/">CVE-2015-4498</cve>
	<bugzilla href="https://bugzilla.suse.com/943550">SUSE bug 943550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943558">SUSE bug 943558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943608">SUSE bug 943608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4500</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4500" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4500" ref_url="https://www.suse.com/security/cve/CVE-2015-4500" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4500/">CVE-2015-4500</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4501</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4501" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4501" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4501" ref_url="https://www.suse.com/security/cve/CVE-2015-4501" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4501/">CVE-2015-4501</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4502</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4502" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4502" ref_url="https://www.suse.com/security/cve/CVE-2015-4502" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    js/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments, which allows remote attackers to bypass intended window access restrictions via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4502/">CVE-2015-4502</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4503</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4503" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4503" ref_url="https://www.suse.com/security/cve/CVE-2015-4503" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles array boundaries that were established with a navigator.mozTCPSocket.open method call and send method calls, which allows remote TCP servers to obtain sensitive information from process memory by reading packet data, as demonstrated by availability of this API in a Firefox OS application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4503/">CVE-2015-4503</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4504</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4504" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4504" ref_url="https://www.suse.com/security/cve/CVE-2015-4504" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause a denial of service (buffer over-read and application crash) via crafted attributes in the ICC 4 profile of an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4504/">CVE-2015-4504</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4505</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4505" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4505" ref_url="https://www.suse.com/security/cve/CVE-2015-4505" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4505/">CVE-2015-4505</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4506</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4506" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4506" ref_url="https://www.suse.com/security/cve/CVE-2015-4506" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4506/">CVE-2015-4506</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4507</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4507" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4507" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4507" ref_url="https://www.suse.com/security/cve/CVE-2015-4507" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the Debugger API is enabled, allows remote attackers to cause a denial of service (getSlotRef assertion failure and application exit) or possibly execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4507/">CVE-2015-4507</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4508</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4508" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4508" ref_url="https://www.suse.com/security/cve/CVE-2015-4508" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4508/">CVE-2015-4508</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4509</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4509" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4509" ref_url="https://www.suse.com/security/cve/CVE-2015-4509" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4509/">CVE-2015-4509</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4510</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4510" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4510" ref_url="https://www.suse.com/security/cve/CVE-2015-4510" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Race condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) by leveraging improper interaction between shared workers and the IndexedDB implementation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4510/">CVE-2015-4510</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4511</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4511" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4511" ref_url="https://www.suse.com/security/cve/CVE-2015-4511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4511/">CVE-2015-4511</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4512</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4512" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4512" ref_url="https://www.suse.com/security/cve/CVE-2015-4512" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    gfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use the Cairo library with 32-bit color-depth surface creation followed by 16-bit color-depth surface display, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) by using a CANVAS element to trigger 2D rendering.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4512/">CVE-2015-4512</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4513</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4513" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4513" ref_url="https://www.suse.com/security/cve/CVE-2015-4513" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4513/">CVE-2015-4513</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4514</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4514" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4514" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4514" ref_url="https://www.suse.com/security/cve/CVE-2015-4514" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4514/">CVE-2015-4514</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4515</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4515" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4515" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4515" ref_url="https://www.suse.com/security/cve/CVE-2015-4515" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4515/">CVE-2015-4515</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4516</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4516" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4516" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4516" ref_url="https://www.suse.com/security/cve/CVE-2015-4516" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 41.0 allows remote attackers to bypass certain ECMAScript 5 (aka ES5) API protection mechanisms and modify immutable properties, and consequently execute arbitrary JavaScript code with chrome privileges, via a crafted web page that does not use ES5 APIs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4516/">CVE-2015-4516</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4517</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4517" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4517" ref_url="https://www.suse.com/security/cve/CVE-2015-4517" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    NetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4517/">CVE-2015-4517</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4518</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4518" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4518" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4518" ref_url="https://www.suse.com/security/cve/CVE-2015-4518" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content Security Policy (CSP) protection mechanism and conduct cross-site scripting (XSS) attacks via vectors involving SVG animations and the about:reader URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4518/">CVE-2015-4518</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4519</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4519" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4519" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4519" ref_url="https://www.suse.com/security/cve/CVE-2015-4519" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4519/">CVE-2015-4519</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154520" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4520</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4520" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4520" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4520" ref_url="https://www.suse.com/security/cve/CVE-2015-4520" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection mechanisms by leveraging (1) duplicate cache-key generation or (2) retrieval of a value from an incorrect HTTP Access-Control-* response header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4520/">CVE-2015-4520</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4521</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4521" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4521" ref_url="https://www.suse.com/security/cve/CVE-2015-4521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4521/">CVE-2015-4521</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4522</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4522" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4522" ref_url="https://www.suse.com/security/cve/CVE-2015-4522" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4522/">CVE-2015-4522</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4551</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4551" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4551" ref_url="https://www.suse.com/security/cve/CVE-2015-4551" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001669.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4551/">CVE-2015-4551</cve>
	<bugzilla href="https://bugzilla.suse.com/893141">SUSE bug 893141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934423">SUSE bug 934423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936188">SUSE bug 936188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936190">SUSE bug 936190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/940838">SUSE bug 940838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4588</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4588" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4588" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4588" ref_url="https://www.suse.com/security/cve/CVE-2015-4588" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001569.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1132-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1134-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4588/">CVE-2015-4588</cve>
	<bugzilla href="https://bugzilla.suse.com/933109">SUSE bug 933109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489034" comment="libwmf-0_2-7-0.2.8.4-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489035" comment="libwmf-devel-0.2.8.4-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489036" comment="libwmf-gnome-0.2.8.4-2.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4620</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4620" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4620" ref_url="https://www.suse.com/security/cve/CVE-2015-4620" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-July/001484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1250-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html" source="SUSE-SU"/>
    <description>
    name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted zone data and then making a query for a name in that zone.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4620/">CVE-2015-4620</cve>
	<bugzilla href="https://bugzilla.suse.com/936476">SUSE bug 936476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4625</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4625" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4625" ref_url="https://www.suse.com/security/cve/CVE-2015-4625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001649.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1734-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4625/">CVE-2015-4625</cve>
	<bugzilla href="https://bugzilla.suse.com/935119">SUSE bug 935119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943816">SUSE bug 943816</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481468" comment="libpolkit0-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481469" comment="polkit-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481470" comment="polkit-devel-0.114-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481471" comment="typelib-1_0-Polkit-1_0-0.114-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4651</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4651" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4651" ref_url="https://www.suse.com/security/cve/CVE-2015-4651" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1215-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00020.html" source="SUSE-SU"/>
    <description>
    The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not properly determine whether enough memory is available for storing IP address strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4651/">CVE-2015-4651</cve>
	<bugzilla href="https://bugzilla.suse.com/935157">SUSE bug 935157</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4652</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4652" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4652" ref_url="https://www.suse.com/security/cve/CVE-2015-4652" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1676-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001610.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1215-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00020.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-gsm_a_dtap.c in the GSM DTAP dissector in Wireshark 1.12.x before 1.12.6 does not properly validate digit characters, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the de_emerg_num_list and de_bcd_num functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4652/">CVE-2015-4652</cve>
	<bugzilla href="https://bugzilla.suse.com/935158">SUSE bug 935158</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4680</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4680" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4680" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4680" ref_url="https://www.suse.com/security/cve/CVE-2015-4680" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003008.html" source="SUSE-SU"/>
    <description>
    FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-4680/">CVE-2015-4680</cve>
	<bugzilla href="https://bugzilla.suse.com/935573">SUSE bug 935573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488329" comment="freeradius-server-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488330" comment="freeradius-server-devel-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488331" comment="freeradius-server-krb5-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488332" comment="freeradius-server-ldap-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488333" comment="freeradius-server-libs-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488334" comment="freeradius-server-mysql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488335" comment="freeradius-server-perl-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488336" comment="freeradius-server-postgresql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488337" comment="freeradius-server-python-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488338" comment="freeradius-server-sqlite-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488339" comment="freeradius-server-utils-3.0.16-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4692</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4692" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4692" ref_url="https://www.suse.com/security/cve/CVE-2015-4692" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The kvm_apic_has_events function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4692/">CVE-2015-4692</cve>
	<bugzilla href="https://bugzilla.suse.com/935542">SUSE bug 935542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4695</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4695" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4695" ref_url="https://www.suse.com/security/cve/CVE-2015-4695" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001569.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00018.html" source="SUSE-SU"/>
    <description>
    meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4695/">CVE-2015-4695</cve>
	<bugzilla href="https://bugzilla.suse.com/936058">SUSE bug 936058</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489034" comment="libwmf-0_2-7-0.2.8.4-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489035" comment="libwmf-devel-0.2.8.4-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489036" comment="libwmf-gnome-0.2.8.4-2.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4696</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4696" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4696" ref_url="https://www.suse.com/security/cve/CVE-2015-4696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001569.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-07/msg00018.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4696/">CVE-2015-4696</cve>
	<bugzilla href="https://bugzilla.suse.com/936062">SUSE bug 936062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489034" comment="libwmf-0_2-7-0.2.8.4-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489035" comment="libwmf-devel-0.2.8.4-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489036" comment="libwmf-gnome-0.2.8.4-2.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4729</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4729" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4729" ref_url="https://www.suse.com/security/cve/CVE-2015-4729" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4729/">CVE-2015-4729</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4731</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4731" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4731" ref_url="https://www.suse.com/security/cve/CVE-2015-4731" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4731/">CVE-2015-4731</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4732</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4732" ref_url="https://www.suse.com/security/cve/CVE-2015-4732" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4732/">CVE-2015-4732</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4733</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4733" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4733" ref_url="https://www.suse.com/security/cve/CVE-2015-4733" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4733/">CVE-2015-4733</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4734</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4734" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4734" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4734" ref_url="https://www.suse.com/security/cve/CVE-2015-4734" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JGSS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4734/">CVE-2015-4734</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4736</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4736" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4736" ref_url="https://www.suse.com/security/cve/CVE-2015-4736" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4736/">CVE-2015-4736</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4748</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4748" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4748" ref_url="https://www.suse.com/security/cve/CVE-2015-4748" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="TID7016694" ref_url="https://www.suse.com/support/kb/doc/?id=7016694" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4748/">CVE-2015-4748</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4749</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4749" ref_url="https://www.suse.com/security/cve/CVE-2015-4749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="TID7016694" ref_url="https://www.suse.com/support/kb/doc/?id=7016694" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4749/">CVE-2015-4749</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4760</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4760" ref_url="https://www.suse.com/security/cve/CVE-2015-4760" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1509-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4760/">CVE-2015-4760</cve>
	<bugzilla href="https://bugzilla.suse.com/937828">SUSE bug 937828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938248">SUSE bug 938248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938895">SUSE bug 938895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4792</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4792" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4792" ref_url="https://www.suse.com/security/cve/CVE-2015-4792" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4792/">CVE-2015-4792</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4802</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4802" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4802" ref_url="https://www.suse.com/security/cve/CVE-2015-4802" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4802/">CVE-2015-4802</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4803</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4803" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4803" ref_url="https://www.suse.com/security/cve/CVE-2015-4803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4803/">CVE-2015-4803</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4805</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4805" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4805" ref_url="https://www.suse.com/security/cve/CVE-2015-4805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4805/">CVE-2015-4805</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4806</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4806" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4806" ref_url="https://www.suse.com/security/cve/CVE-2015-4806" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4806/">CVE-2015-4806</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4807</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4807" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4807" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4807" ref_url="https://www.suse.com/security/cve/CVE-2015-4807" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, allows remote authenticated users to affect availability via unknown vectors related to Server : Query Cache.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4807/">CVE-2015-4807</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4810</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4810" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4810" ref_url="https://www.suse.com/security/cve/CVE-2015-4810" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u85 and 8u60 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4810/">CVE-2015-4810</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4815</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4815" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4815" ref_url="https://www.suse.com/security/cve/CVE-2015-4815" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4815/">CVE-2015-4815</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4816</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4816" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4816" ref_url="https://www.suse.com/security/cve/CVE-2015-4816" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4816/">CVE-2015-4816</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958790">SUSE bug 958790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4819</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4819" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4819" ref_url="https://www.suse.com/security/cve/CVE-2015-4819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client programs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4819/">CVE-2015-4819</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958790">SUSE bug 958790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969667">SUSE bug 969667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4826</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4826" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4826" ref_url="https://www.suse.com/security/cve/CVE-2015-4826" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4826/">CVE-2015-4826</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4830</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4830" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4830" ref_url="https://www.suse.com/security/cve/CVE-2015-4830" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4830/">CVE-2015-4830</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4835</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4835" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4835" ref_url="https://www.suse.com/security/cve/CVE-2015-4835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4835/">CVE-2015-4835</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4836</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4836" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4836" ref_url="https://www.suse.com/security/cve/CVE-2015-4836" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4836/">CVE-2015-4836</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4840</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4840" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4840" ref_url="https://www.suse.com/security/cve/CVE-2015-4840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4840/">CVE-2015-4840</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4842</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4842" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4842" ref_url="https://www.suse.com/security/cve/CVE-2015-4842" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4842/">CVE-2015-4842</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4843</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4843" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4843" ref_url="https://www.suse.com/security/cve/CVE-2015-4843" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4843/">CVE-2015-4843</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4844</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4844" ref_url="https://www.suse.com/security/cve/CVE-2015-4844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4844/">CVE-2015-4844</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4858</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4858" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4858" ref_url="https://www.suse.com/security/cve/CVE-2015-4858" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-4913.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4858/">CVE-2015-4858</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4860</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4860" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4860" ref_url="https://www.suse.com/security/cve/CVE-2015-4860" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4860/">CVE-2015-4860</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4861</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4861" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4861" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4861" ref_url="https://www.suse.com/security/cve/CVE-2015-4861" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4861/">CVE-2015-4861</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4864</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4864" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4864" ref_url="https://www.suse.com/security/cve/CVE-2015-4864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4864/">CVE-2015-4864</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4866</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4866" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4866" ref_url="https://www.suse.com/security/cve/CVE-2015-4866" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4866/">CVE-2015-4866</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4868</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4868" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4868" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4868" ref_url="https://www.suse.com/security/cve/CVE-2015-4868" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u60 and Java SE Embedded 8u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4868/">CVE-2015-4868</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4870</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4870" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4870" ref_url="https://www.suse.com/security/cve/CVE-2015-4870" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4870/">CVE-2015-4870</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154871" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4871</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4871" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4871" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4871" ref_url="https://www.suse.com/security/cve/CVE-2015-4871" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4871/">CVE-2015-4871</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154872" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4872</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4872" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4872" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4872" ref_url="https://www.suse.com/security/cve/CVE-2015-4872" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4872/">CVE-2015-4872</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154879" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4879</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4879" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4879" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4879" ref_url="https://www.suse.com/security/cve/CVE-2015-4879" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4879/">CVE-2015-4879</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958790">SUSE bug 958790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4881</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4881" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4881" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4881" ref_url="https://www.suse.com/security/cve/CVE-2015-4881" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4835.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4881/">CVE-2015-4881</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334202" comment="java-1_8_0-openjdk is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154882" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4882</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4882" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4882" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4882" ref_url="https://www.suse.com/security/cve/CVE-2015-4882" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4882/">CVE-2015-4882</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154883" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4883</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4883" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4883" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4883" ref_url="https://www.suse.com/security/cve/CVE-2015-4883" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4883/">CVE-2015-4883</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154893" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4893</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4893" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4893" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4893" ref_url="https://www.suse.com/security/cve/CVE-2015-4893" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4893/">CVE-2015-4893</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4895</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4895" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4895" ref_url="https://www.suse.com/security/cve/CVE-2015-4895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4895/">CVE-2015-4895</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958790">SUSE bug 958790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4901</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4901" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4901" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4901" ref_url="https://www.suse.com/security/cve/CVE-2015-4901" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4901/">CVE-2015-4901</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4902</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4902" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4902" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4902" ref_url="https://www.suse.com/security/cve/CVE-2015-4902" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4902/">CVE-2015-4902</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4903</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4903" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4903" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4903" ref_url="https://www.suse.com/security/cve/CVE-2015-4903" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4903/">CVE-2015-4903</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154906" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4906</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4906" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4906" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4906" ref_url="https://www.suse.com/security/cve/CVE-2015-4906" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different vulnerability than CVE-2015-4908 and CVE-2015-4916.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4906/">CVE-2015-4906</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4908</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4908" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4908" ref_url="https://www.suse.com/security/cve/CVE-2015-4908" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4916.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4908/">CVE-2015-4908</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4911</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4911" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4911" ref_url="https://www.suse.com/security/cve/CVE-2015-4911" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1874-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1874-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1875-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4911/">CVE-2015-4911</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4913</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4913" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4913" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4913" ref_url="https://www.suse.com/security/cve/CVE-2015-4913" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001806.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4913/">CVE-2015-4913</cve>
	<bugzilla href="https://bugzilla.suse.com/951391">SUSE bug 951391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958789">SUSE bug 958789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154916" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4916</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-4916" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4916" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-4916" ref_url="https://www.suse.com/security/cve/CVE-2015-4916" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4916/">CVE-2015-4916</cve>
	<bugzilla href="https://bugzilla.suse.com/951376">SUSE bug 951376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5006</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5006" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5006" ref_url="https://www.suse.com/security/cve/CVE-2015-5006" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2168-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html" source="SUSE-SU"/>
    <description>
    IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-5006/">CVE-2015-5006</cve>
	<bugzilla href="https://bugzilla.suse.com/955131">SUSE bug 955131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5041</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5041" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5041" ref_url="https://www.suse.com/security/cve/CVE-2015-5041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
    <description>
    The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5041/">CVE-2015-5041</cve>
	<bugzilla href="https://bugzilla.suse.com/960402">SUSE bug 960402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5154</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5154" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5154" ref_url="https://www.suse.com/security/cve/CVE-2015-5154" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001543.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1409-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1421-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1479-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5154/">CVE-2015-5154</cve>
	<bugzilla href="https://bugzilla.suse.com/938344">SUSE bug 938344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333988" comment="qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335414" comment="qemu-arm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336533" comment="qemu-audio-alsa is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336534" comment="qemu-audio-oss is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336535" comment="qemu-audio-pa is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335210" comment="qemu-block-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335211" comment="qemu-block-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335248" comment="qemu-block-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335212" comment="qemu-block-ssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335213" comment="qemu-guest-agent is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335214" comment="qemu-ipxe is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335243" comment="qemu-kvm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335215" comment="qemu-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335244" comment="qemu-seabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335245" comment="qemu-sgabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335217" comment="qemu-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336537" comment="qemu-ui-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336538" comment="qemu-ui-gtk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335218" comment="qemu-vgabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335246" comment="qemu-x86 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5156</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5156" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5156" ref_url="https://www.suse.com/security/cve/CVE-2015-5156" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004055.html" source="SUSE-SU"/>
    <description>
    The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5156/">CVE-2015-5156</cve>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123903">SUSE bug 1123903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/940776">SUSE bug 940776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945048">SUSE bug 945048</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951638">SUSE bug 951638</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5157</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5157" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5157" ref_url="https://www.suse.com/security/cve/CVE-2015-5157" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2350-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
    <description>
    arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-5157/">CVE-2015-5157</cve>
	<bugzilla href="https://bugzilla.suse.com/1072204">SUSE bug 1072204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937969">SUSE bug 937969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/937970">SUSE bug 937970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/938706">SUSE bug 938706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939207">SUSE bug 939207</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5165</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5165" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5165" ref_url="https://www.suse.com/security/cve/CVE-2015-5165" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1404-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001542.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001543.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1421-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1479-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
    <description>
    The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-5165/">CVE-2015-5165</cve>
	<bugzilla href="https://bugzilla.suse.com/939712">SUSE bug 939712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5180</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5180" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5180" ref_url="https://www.suse.com/security/cve/CVE-2015-5180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011984.html" source="SUSE-SU"/>
    <description>
    res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-22"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5180/">CVE-2015-5180</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215582">SUSE bug 1215582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941234">SUSE bug 941234</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334826" comment="glibc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334837" comment="glibc-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339498" comment="glibc-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334827" comment="glibc-i18ndata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334831" comment="glibc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334828" comment="glibc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339499" comment="glibc-locale-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334832" comment="glibc-profile is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334829" comment="nscd is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5186</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5186" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5186" ref_url="https://www.suse.com/security/cve/CVE-2015-5186" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0563-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190563-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005428.html" source="SUSE-SU"/>
    <description>
    Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5186/">CVE-2015-5186</cve>
	<bugzilla href="https://bugzilla.suse.com/941922">SUSE bug 941922</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480067" comment="audit-devel-2.8.1-3.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480068" comment="libaudit1-2.8.1-3.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480069" comment="libaudit1-32bit-2.8.1-3.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480070" comment="libauparse0-2.8.1-3.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5191</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5191" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5191" ref_url="https://www.suse.com/security/cve/CVE-2015-5191" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0701-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002697.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0705-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002699.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0509-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0827-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00092.html" source="SUSE-SU"/>
    <description>
    VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5191/">CVE-2015-5191</cve>
	<bugzilla href="https://bugzilla.suse.com/1007600">SUSE bug 1007600</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486888" comment="open-vm-tools-desktop-10.3.10-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481529" comment="libvmtools-devel-10.3.10-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481530" comment="libvmtools0-10.3.10-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481531" comment="open-vm-tools-10.3.10-1.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5198</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5198" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5198" ref_url="https://www.suse.com/security/cve/CVE-2015-5198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1892-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001670.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1537-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00012.html" source="SUSE-SU"/>
    <description>
    libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the VDPAU_DRIVER_PATH environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5198/">CVE-2015-5198</cve>
	<bugzilla href="https://bugzilla.suse.com/943967">SUSE bug 943967</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486511" comment="libvdpau-devel-1.1.1-1.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486512" comment="libvdpau1-1.1.1-1.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5199</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5199" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5199" ref_url="https://www.suse.com/security/cve/CVE-2015-5199" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1892-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001670.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1537-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00012.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5199/">CVE-2015-5199</cve>
	<bugzilla href="https://bugzilla.suse.com/943968">SUSE bug 943968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486511" comment="libvdpau-devel-1.1.1-1.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486512" comment="libvdpau1-1.1.1-1.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5200</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5200" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5200" ref_url="https://www.suse.com/security/cve/CVE-2015-5200" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1892-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001664.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001670.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1537-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00012.html" source="SUSE-SU"/>
    <description>
    The trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to write to arbitrary files via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5200/">CVE-2015-5200</cve>
	<bugzilla href="https://bugzilla.suse.com/943969">SUSE bug 943969</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486511" comment="libvdpau-devel-1.1.1-1.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486512" comment="libvdpau1-1.1.1-1.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5203</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5203" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5203" ref_url="https://www.suse.com/security/cve/CVE-2015-5203" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-5203/">CVE-2015-5203</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941919">SUSE bug 941919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942553">SUSE bug 942553</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5212</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5212" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5212" ref_url="https://www.suse.com/security/cve/CVE-2015-5212" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001669.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
    <description>
    Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5212/">CVE-2015-5212</cve>
	<bugzilla href="https://bugzilla.suse.com/934423">SUSE bug 934423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936188">SUSE bug 936188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5213</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5213" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5213" ref_url="https://www.suse.com/security/cve/CVE-2015-5213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001669.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
    <description>
    Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5213/">CVE-2015-5213</cve>
	<bugzilla href="https://bugzilla.suse.com/934423">SUSE bug 934423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/936190">SUSE bug 936190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5214</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5214" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5214" ref_url="https://www.suse.com/security/cve/CVE-2015-5214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001669.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001841.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0588-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00156.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via an index to a non-existent bookmark in a DOC file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5214/">CVE-2015-5214</cve>
	<bugzilla href="https://bugzilla.suse.com/934423">SUSE bug 934423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/940838">SUSE bug 940838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5218</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5218" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5218" ref_url="https://www.suse.com/security/cve/CVE-2015-5218" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008640.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1910-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00035.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-5218/">CVE-2015-5218</cve>
	<bugzilla href="https://bugzilla.suse.com/949754">SUSE bug 949754</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488452" comment="uuidd-2.33.1-2.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481268" comment="libblkid-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481269" comment="libblkid-devel-static-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481270" comment="libblkid1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481271" comment="libblkid1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481272" comment="libfdisk-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481273" comment="libfdisk1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481274" comment="libmount-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481275" comment="libmount1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481276" comment="libmount1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481277" comment="libsmartcols-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481278" comment="libsmartcols1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481279" comment="libuuid-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481280" comment="libuuid-devel-static-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481281" comment="libuuid1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481282" comment="libuuid1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481283" comment="util-linux-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481284" comment="util-linux-lang-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481285" comment="util-linux-systemd-2.33.1-2.14 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5221</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5221" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5221" ref_url="https://www.suse.com/security/cve/CVE-2015-5221" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-5221/">CVE-2015-5221</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942553">SUSE bug 942553</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5225</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5225" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5225" ref_url="https://www.suse.com/security/cve/CVE-2015-5225" source="SUSE CVE"/>
    <description>
    Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5225/">CVE-2015-5225</cve>
	<bugzilla href="https://bugzilla.suse.com/942845">SUSE bug 942845</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5234</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5234" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5234" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5234" ref_url="https://www.suse.com/security/cve/CVE-2015-5234" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001613.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001615.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00019.html" source="SUSE-SU"/>
    <description>
    IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5234/">CVE-2015-5234</cve>
	<bugzilla href="https://bugzilla.suse.com/944209">SUSE bug 944209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489065" comment="icedtea-web-1.7.1-5.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155235" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5235</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5235" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5235" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5235" ref_url="https://www.suse.com/security/cve/CVE-2015-5235" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001613.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001615.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00019.html" source="SUSE-SU"/>
    <description>
    IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5235/">CVE-2015-5235</cve>
	<bugzilla href="https://bugzilla.suse.com/944208">SUSE bug 944208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489065" comment="icedtea-web-1.7.1-5.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5239</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5239" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5239" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5239" ref_url="https://www.suse.com/security/cve/CVE-2015-5239" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5239/">CVE-2015-5239</cve>
	<bugzilla href="https://bugzilla.suse.com/944463">SUSE bug 944463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5244</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5244" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5244" ref_url="https://www.suse.com/security/cve/CVE-2015-5244" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2396-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002292.html" source="SUSE-SU"/>
    <description>
    The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5244/">CVE-2015-5244</cve>
	<bugzilla href="https://bugzilla.suse.com/945905">SUSE bug 945905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488115" comment="apache2-mod_nss-1.0.17-1.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5245</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5245" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5245" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5245" ref_url="https://www.suse.com/security/cve/CVE-2015-5245" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001952.html" source="SUSE-SU"/>
    <description>
    CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5245/">CVE-2015-5245</cve>
	<bugzilla href="https://bugzilla.suse.com/945206">SUSE bug 945206</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335682" comment="ceph-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336219" comment="libcephfs-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336216" comment="libcephfs2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336220" comment="librados-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335684" comment="librados2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341012" comment="libradospp-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336221" comment="librbd-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335686" comment="librbd1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337948" comment="librgw-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336217" comment="librgw2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337899" comment="python3-ceph-argparse is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337900" comment="python3-cephfs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337901" comment="python3-rados is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337902" comment="python3-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337903" comment="python3-rgw is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337949" comment="rados-objclass-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5247</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5247" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5247" ref_url="https://www.suse.com/security/cve/CVE-2015-5247" source="SUSE CVE"/>
    <description>
    The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-5247/">CVE-2015-5247</cve>
	<bugzilla href="https://bugzilla.suse.com/945645">SUSE bug 945645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481528" comment="libvirt-libs-5.1.0-6.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488366" comment="libvirt-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488367" comment="libvirt-admin-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488368" comment="libvirt-bash-completion-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488369" comment="libvirt-client-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488370" comment="libvirt-daemon-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488371" comment="libvirt-daemon-config-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488372" comment="libvirt-daemon-config-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488373" comment="libvirt-daemon-driver-interface-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488374" comment="libvirt-daemon-driver-libxl-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488375" comment="libvirt-daemon-driver-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488376" comment="libvirt-daemon-driver-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488377" comment="libvirt-daemon-driver-nodedev-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488378" comment="libvirt-daemon-driver-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488379" comment="libvirt-daemon-driver-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488380" comment="libvirt-daemon-driver-secret-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488381" comment="libvirt-daemon-driver-storage-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488382" comment="libvirt-daemon-driver-storage-core-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488383" comment="libvirt-daemon-driver-storage-disk-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488384" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488385" comment="libvirt-daemon-driver-storage-logical-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488386" comment="libvirt-daemon-driver-storage-mpath-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488387" comment="libvirt-daemon-driver-storage-rbd-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488388" comment="libvirt-daemon-driver-storage-scsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488389" comment="libvirt-daemon-hooks-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488390" comment="libvirt-daemon-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488391" comment="libvirt-daemon-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488392" comment="libvirt-daemon-xen-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488393" comment="libvirt-devel-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488394" comment="libvirt-doc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488395" comment="libvirt-lock-sanlock-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488396" comment="libvirt-nss-5.1.0-6.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5252</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5252" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5252" ref_url="https://www.suse.com/security/cve/CVE-2015-5252" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0032-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0164-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-5252/">CVE-2015-5252</cve>
	<bugzilla href="https://bugzilla.suse.com/958582">SUSE bug 958582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5259</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5259" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5259" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5259" ref_url="https://www.suse.com/security/cve/CVE-2015-5259" source="SUSE CVE"/>
    <description>
    Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5259/">CVE-2015-5259</cve>
	<bugzilla href="https://bugzilla.suse.com/958299">SUSE bug 958299</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155260" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5260</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5260" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5260" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5260" ref_url="https://www.suse.com/security/cve/CVE-2015-5260" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1750-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00032.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-5260/">CVE-2015-5260</cve>
	<bugzilla href="https://bugzilla.suse.com/944787">SUSE bug 944787</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488364" comment="libspice-server-devel-0.14.1-2.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488365" comment="libspice-server1-0.14.1-2.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5261</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5261" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5261" ref_url="https://www.suse.com/security/cve/CVE-2015-5261" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001627.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1750-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00032.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-5261/">CVE-2015-5261</cve>
	<bugzilla href="https://bugzilla.suse.com/948976">SUSE bug 948976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982386">SUSE bug 982386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488364" comment="libspice-server-devel-0.14.1-2.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488365" comment="libspice-server1-0.14.1-2.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5262</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5262" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5262" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5262" ref_url="https://www.suse.com/security/cve/CVE-2015-5262" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007689.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007690.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3152-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007692.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html" source="SUSE-SU"/>
    <description>
    http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5262/">CVE-2015-5262</cve>
	<bugzilla href="https://bugzilla.suse.com/1120767">SUSE bug 1120767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945190">SUSE bug 945190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333950" comment="apache-commons-httpclient is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492775" comment="apache-commons-httpclient-3.1-4.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5278</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5278" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5278" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5278" ref_url="https://www.suse.com/security/cve/CVE-2015-5278" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5278/">CVE-2015-5278</cve>
	<bugzilla href="https://bugzilla.suse.com/945989">SUSE bug 945989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964947">SUSE bug 964947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155279" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5279</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5279" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5279" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5279" ref_url="https://www.suse.com/security/cve/CVE-2015-5279" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5279/">CVE-2015-5279</cve>
	<bugzilla href="https://bugzilla.suse.com/945987">SUSE bug 945987</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5296</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5296" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5296" ref_url="https://www.suse.com/security/cve/CVE-2015-5296" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0032-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0164-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allows man-in-the-middle attackers to conduct encrypted-to-unencrypted downgrade attacks by modifying the client-server data stream, related to clidfs.c, libsmb_server.c, and smbXcli_base.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-5296/">CVE-2015-5296</cve>
	<bugzilla href="https://bugzilla.suse.com/1058622">SUSE bug 1058622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958584">SUSE bug 958584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973031">SUSE bug 973031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5297</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5297" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5297" ref_url="https://www.suse.com/security/cve/CVE-2015-5297" source="SUSE CVE"/>
    <description>
    An integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8. An attacker could exploit this issue to cause an application using pixman to crash or, potentially, execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2015-5297/">CVE-2015-5297</cve>
	<bugzilla href="https://bugzilla.suse.com/1117000">SUSE bug 1117000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337724" comment="libpixman-1-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337940" comment="libpixman-1-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655956" comment="libpixman-1-0-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155299" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5299</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5299" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5299" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5299" ref_url="https://www.suse.com/security/cve/CVE-2015-5299" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0032-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0164-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not verify that the DIRECTORY_LIST access right has been granted, which allows remote attackers to access snapshots by visiting a shadow copy directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-5299/">CVE-2015-5299</cve>
	<bugzilla href="https://bugzilla.suse.com/958583">SUSE bug 958583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5300</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5300" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5300" ref_url="https://www.suse.com/security/cve/CVE-2015-5300" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5300/">CVE-2015-5300</cve>
	<bugzilla href="https://bugzilla.suse.com/951629">SUSE bug 951629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962624">SUSE bug 962624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5307</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5307" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5307" ref_url="https://www.suse.com/security/cve/CVE-2015-5307" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2350-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5307/">CVE-2015-5307</cve>
	<bugzilla href="https://bugzilla.suse.com/953527">SUSE bug 953527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954018">SUSE bug 954018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954404">SUSE bug 954404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954405">SUSE bug 954405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962977">SUSE bug 962977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5310</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5310" ref_url="https://www.suse.com/security/cve/CVE-2015-5310" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002272.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00075.html" source="SUSE-SU"/>
    <description>
    The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection (MFP) was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service (ignored packets) via a WNM Sleep Mode response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-5310/">CVE-2015-5310</cve>
	<bugzilla href="https://bugzilla.suse.com/952254">SUSE bug 952254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953115">SUSE bug 953115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481672" comment="wpa_supplicant-2.6-4.11.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5312</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5312" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5312" ref_url="https://www.suse.com/security/cve/CVE-2015-5312" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5312/">CVE-2015-5312</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957105">SUSE bug 957105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969769">SUSE bug 969769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5313</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5313" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5313" ref_url="https://www.suse.com/security/cve/CVE-2015-5313" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0304-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001840.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0923-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001975.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/001977.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0209-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0216-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00082.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-5313/">CVE-2015-5313</cve>
	<bugzilla href="https://bugzilla.suse.com/953110">SUSE bug 953110</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481528" comment="libvirt-libs-5.1.0-6.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488366" comment="libvirt-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488367" comment="libvirt-admin-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488368" comment="libvirt-bash-completion-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488369" comment="libvirt-client-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488370" comment="libvirt-daemon-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488371" comment="libvirt-daemon-config-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488372" comment="libvirt-daemon-config-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488373" comment="libvirt-daemon-driver-interface-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488374" comment="libvirt-daemon-driver-libxl-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488375" comment="libvirt-daemon-driver-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488376" comment="libvirt-daemon-driver-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488377" comment="libvirt-daemon-driver-nodedev-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488378" comment="libvirt-daemon-driver-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488379" comment="libvirt-daemon-driver-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488380" comment="libvirt-daemon-driver-secret-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488381" comment="libvirt-daemon-driver-storage-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488382" comment="libvirt-daemon-driver-storage-core-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488383" comment="libvirt-daemon-driver-storage-disk-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488384" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488385" comment="libvirt-daemon-driver-storage-logical-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488386" comment="libvirt-daemon-driver-storage-mpath-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488387" comment="libvirt-daemon-driver-storage-rbd-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488388" comment="libvirt-daemon-driver-storage-scsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488389" comment="libvirt-daemon-hooks-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488390" comment="libvirt-daemon-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488391" comment="libvirt-daemon-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488392" comment="libvirt-daemon-xen-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488393" comment="libvirt-devel-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488394" comment="libvirt-doc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488395" comment="libvirt-lock-sanlock-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488396" comment="libvirt-nss-5.1.0-6.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155315" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5315</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5315" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5315" ref_url="https://www.suse.com/security/cve/CVE-2015-5315" source="SUSE CVE"/>
    <description>
    The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when EAP-pwd is enabled in a network configuration profile, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5315/">CVE-2015-5315</cve>
	<bugzilla href="https://bugzilla.suse.com/953115">SUSE bug 953115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481672" comment="wpa_supplicant-2.6-4.11.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5316</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5316" ref_url="https://www.suse.com/security/cve/CVE-2015-5316" source="SUSE CVE"/>
    <description>
    The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an EAP-pwd Confirm message followed by the Identity exchange.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5316/">CVE-2015-5316</cve>
	<bugzilla href="https://bugzilla.suse.com/953115">SUSE bug 953115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481672" comment="wpa_supplicant-2.6-4.11.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5330</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5330" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5330" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5330" ref_url="https://www.suse.com/security/cve/CVE-2015-5330" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0032-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0164-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading (1) an error message or (2) a database value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-5330/">CVE-2015-5330</cve>
	<bugzilla href="https://bugzilla.suse.com/958581">SUSE bug 958581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958586">SUSE bug 958586</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481422" comment="libldb-devel-1.4.6-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481423" comment="libldb1-1.4.6-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481424" comment="libldb1-32bit-1.4.6-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481425" comment="python3-ldb-1.4.6-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481426" comment="python3-ldb-devel-1.4.6-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5343</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5343" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5343" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5343" ref_url="https://www.suse.com/security/cve/CVE-2015-5343" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001785.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2362-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00111.html" source="SUSE-SU"/>
    <description>
    Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2015-5343/">CVE-2015-5343</cve>
	<bugzilla href="https://bugzilla.suse.com/958300">SUSE bug 958300</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5370</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5370" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5370" ref_url="https://www.suse.com/security/cve/CVE-2015-5370" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5370/">CVE-2015-5370</cve>
	<bugzilla href="https://bugzilla.suse.com/936862">SUSE bug 936862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5400</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5400" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5400" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5400" ref_url="https://www.suse.com/security/cve/CVE-2015-5400" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html" source="SUSE-SU"/>
    <description>
    Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5400/">CVE-2015-5400</cve>
	<bugzilla href="https://bugzilla.suse.com/938715">SUSE bug 938715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967073">SUSE bug 967073</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488449" comment="squid-4.4-5.3.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5477</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5477" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5477" ref_url="https://www.suse.com/security/cve/CVE-2015-5477" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0227-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="TID7016709" ref_url="https://www.suse.com/support/kb/doc?id=7016709" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5477/">CVE-2015-5477</cve>
	<bugzilla href="https://bugzilla.suse.com/1000362">SUSE bug 1000362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939567">SUSE bug 939567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980168">SUSE bug 980168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5522</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5522" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5522" ref_url="https://www.suse.com/security/cve/CVE-2015-5522" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001586.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5522/">CVE-2015-5522</cve>
	<bugzilla href="https://bugzilla.suse.com/933588">SUSE bug 933588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487680" comment="libtidy-devel-5.4.0-1.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487681" comment="libtidy5-5.4.0-1.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487682" comment="tidy-5.4.0-1.34 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5523</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5523" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5523" ref_url="https://www.suse.com/security/cve/CVE-2015-5523" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001586.html" source="SUSE-SU"/>
    <description>
    The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5523/">CVE-2015-5523</cve>
	<bugzilla href="https://bugzilla.suse.com/933588">SUSE bug 933588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487680" comment="libtidy-devel-5.4.0-1.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487681" comment="libtidy5-5.4.0-1.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487682" comment="tidy-5.4.0-1.34 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5602</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5602" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5602" ref_url="https://www.suse.com/security/cve/CVE-2015-5602" source="SUSE CVE"/>
    <description>
    sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5602/">CVE-2015-5602</cve>
	<bugzilla href="https://bugzilla.suse.com/917806">SUSE bug 917806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953359">SUSE bug 953359</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659701" comment="sudo-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5621</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5621" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5621" ref_url="https://www.suse.com/security/cve/CVE-2015-5621" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001585.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001593.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1502-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5621/">CVE-2015-5621</cve>
	<bugzilla href="https://bugzilla.suse.com/1111123">SUSE bug 1111123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/940188">SUSE bug 940188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969779">SUSE bug 969779</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481482" comment="libsnmp30-5.7.3-8.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481483" comment="net-snmp-5.7.3-8.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481484" comment="net-snmp-devel-5.7.3-8.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481485" comment="perl-SNMP-5.7.3-8.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481486" comment="snmp-mibs-5.7.3-8.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5722</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5722" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5722" ref_url="https://www.suse.com/security/cve/CVE-2015-5722" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1480-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0227-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1667-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00002.html" source="SUSE-SU"/>
    <description>
    buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5722/">CVE-2015-5722</cve>
	<bugzilla href="https://bugzilla.suse.com/944066">SUSE bug 944066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944107">SUSE bug 944107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954983">SUSE bug 954983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958861">SUSE bug 958861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5738</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5738" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5738" ref_url="https://www.suse.com/security/cve/CVE-2015-5738" source="SUSE CVE"/>
    <description>
    The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-5738/">CVE-2015-5738</cve>
	<bugzilla href="https://bugzilla.suse.com/944456">SUSE bug 944456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944835">SUSE bug 944835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944836">SUSE bug 944836</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481367" comment="libgcrypt-devel-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481368" comment="libgcrypt20-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481369" comment="libgcrypt20-32bit-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481370" comment="libgcrypt20-hmac-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481371" comment="libgcrypt20-hmac-32bit-1.8.2-6.7 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5745</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5745" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5745" ref_url="https://www.suse.com/security/cve/CVE-2015-5745" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5745/">CVE-2015-5745</cve>
	<bugzilla href="https://bugzilla.suse.com/940929">SUSE bug 940929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5969</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5969" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5969" ref_url="https://www.suse.com/security/cve/CVE-2015-5969" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001838.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0368-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0379-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00050.html" source="SUSE-SU"/>
    <description>
    The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise (SLE) 12.1 and openSUSE Leap 42.1 allows local users to discover database credentials by listing a process and its arguments.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5969/">CVE-2015-5969</cve>
	<bugzilla href="https://bugzilla.suse.com/957174">SUSE bug 957174</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5986</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-5986" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5986" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-5986" ref_url="https://www.suse.com/security/cve/CVE-2015-5986" source="SUSE CVE"/>
    <description>
    openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5986/">CVE-2015-5986</cve>
	<bugzilla href="https://bugzilla.suse.com/944066">SUSE bug 944066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/944107">SUSE bug 944107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6241</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6241" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6241" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6241" ref_url="https://www.suse.com/security/cve/CVE-2015-6241" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1676-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001625.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00057.html" source="SUSE-SU"/>
    <description>
    The proto_tree_add_bytes_item function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before 1.12.7 does not properly terminate a data structure after a failure to locate a number within a string, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6241/">CVE-2015-6241</cve>
	<bugzilla href="https://bugzilla.suse.com/941500">SUSE bug 941500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6242</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6242" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6242" ref_url="https://www.suse.com/security/cve/CVE-2015-6242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1676-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001625.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00057.html" source="SUSE-SU"/>
    <description>
    The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6242/">CVE-2015-6242</cve>
	<bugzilla href="https://bugzilla.suse.com/941500">SUSE bug 941500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6243</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6243" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6243" ref_url="https://www.suse.com/security/cve/CVE-2015-6243" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1676-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001625.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00057.html" source="SUSE-SU"/>
    <description>
    The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6243/">CVE-2015-6243</cve>
	<bugzilla href="https://bugzilla.suse.com/941500">SUSE bug 941500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6244</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6244" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6244" ref_url="https://www.suse.com/security/cve/CVE-2015-6244" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1676-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001625.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00057.html" source="SUSE-SU"/>
    <description>
    The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained in packet data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6244/">CVE-2015-6244</cve>
	<bugzilla href="https://bugzilla.suse.com/941500">SUSE bug 941500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6245</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6245" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6245" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6245" ref_url="https://www.suse.com/security/cve/CVE-2015-6245" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1676-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001625.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00057.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6245/">CVE-2015-6245</cve>
	<bugzilla href="https://bugzilla.suse.com/941500">SUSE bug 941500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6246</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6246" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6246" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6246" ref_url="https://www.suse.com/security/cve/CVE-2015-6246" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1676-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001625.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00057.html" source="SUSE-SU"/>
    <description>
    The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6246/">CVE-2015-6246</cve>
	<bugzilla href="https://bugzilla.suse.com/941500">SUSE bug 941500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6247</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6247" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6247" ref_url="https://www.suse.com/security/cve/CVE-2015-6247" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1676-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001625.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00057.html" source="SUSE-SU"/>
    <description>
    The dissect_openflow_tablemod_v5 function in epan/dissectors/packet-openflow_v5.c in the OpenFlow dissector in Wireshark 1.12.x before 1.12.7 does not validate a certain offset value, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6247/">CVE-2015-6247</cve>
	<bugzilla href="https://bugzilla.suse.com/941500">SUSE bug 941500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6248</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6248" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6248" ref_url="https://www.suse.com/security/cve/CVE-2015-6248" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1676-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001625.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00057.html" source="SUSE-SU"/>
    <description>
    The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6248/">CVE-2015-6248</cve>
	<bugzilla href="https://bugzilla.suse.com/941500">SUSE bug 941500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6249</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6249" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6249" ref_url="https://www.suse.com/security/cve/CVE-2015-6249" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001609.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1676-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001625.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00057.html" source="SUSE-SU"/>
    <description>
    The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6249/">CVE-2015-6249</cve>
	<bugzilla href="https://bugzilla.suse.com/941500">SUSE bug 941500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6251</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6251" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6251" ref_url="https://www.suse.com/security/cve/CVE-2015-6251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001582.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-09/msg00001.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6251/">CVE-2015-6251</cve>
	<bugzilla href="https://bugzilla.suse.com/941794">SUSE bug 941794</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481164" comment="gnutls-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481165" comment="libgnutls-devel-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481166" comment="libgnutls30-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481167" comment="libgnutls30-32bit-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481168" comment="libgnutlsxx-devel-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481169" comment="libgnutlsxx28-3.6.7-6.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156360" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6360</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6360" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6360" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6360" ref_url="https://www.suse.com/security/cve/CVE-2015-6360" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2266-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00033.html" source="SUSE-SU"/>
    <description>
    The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-08-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-6360/">CVE-2015-6360</cve>
	<bugzilla href="https://bugzilla.suse.com/957376">SUSE bug 957376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486502" comment="libsrtp-devel-1.6.0-2.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486503" comment="libsrtp1-1.6.0-2.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6496</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6496" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6496" ref_url="https://www.suse.com/security/cve/CVE-2015-6496" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001614.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00015.html" source="SUSE-SU"/>
    <description>
    conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP, or (3) ICMPv6 packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6496/">CVE-2015-6496</cve>
	<bugzilla href="https://bugzilla.suse.com/942149">SUSE bug 942149</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480142" comment="conntrack-tools-1.4.4-1.29 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6525</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6525" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6525" ref_url="https://www.suse.com/security/cve/CVE-2015-6525" source="SUSE CVE"/>
    <description>
    Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_prepend, (3) evbuffer_expand, (4) exbuffer_reserve_space, or (5) evbuffer_read function, which triggers a heap-based buffer overflow or an infinite loop.  NOTE: this identifier was SPLIT from CVE-2014-6272 per ADT3 due to different affected versions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-6525/">CVE-2015-6525</cve>
	<bugzilla href="https://bugzilla.suse.com/897243">SUSE bug 897243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943011">SUSE bug 943011</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009654580" comment="libevent-2_1-8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654581" comment="libevent-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6749</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6749" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6749" ref_url="https://www.suse.com/security/cve/CVE-2015-6749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001634.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1686-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00013.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted AIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6749/">CVE-2015-6749</cve>
	<bugzilla href="https://bugzilla.suse.com/943795">SUSE bug 943795</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486554" comment="vorbis-tools-1.4.0-1.53 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486555" comment="vorbis-tools-lang-1.4.0-1.53 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6764</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6764" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6764" ref_url="https://www.suse.com/security/cve/CVE-2015-6764" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1816-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0138-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00045.html" source="SUSE-SU"/>
    <description>
    The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-25"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-6764/">CVE-2015-6764</cve>
	<bugzilla href="https://bugzilla.suse.com/956902">SUSE bug 956902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957519">SUSE bug 957519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334370" comment="nodejs10 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334370" comment="nodejs10 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338004" comment="nodejs10-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338005" comment="nodejs10-docs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338006" comment="npm10 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6815</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6815" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6815" ref_url="https://www.suse.com/security/cve/CVE-2015-6815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-6815/">CVE-2015-6815</cve>
	<bugzilla href="https://bugzilla.suse.com/944697">SUSE bug 944697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6831</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6831" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6831" ref_url="https://www.suse.com/security/cve/CVE-2015-6831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1818-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00025.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2015-6831/">CVE-2015-6831</cve>
	<bugzilla href="https://bugzilla.suse.com/942291">SUSE bug 942291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942294">SUSE bug 942294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942295">SUSE bug 942295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945188">SUSE bug 945188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980366">SUSE bug 980366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781768" comment="php7-embed is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6832</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6832" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6832" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6832" ref_url="https://www.suse.com/security/cve/CVE-2015-6832" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00025.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to execute arbitrary code via crafted serialized data that triggers misuse of an array field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6832/">CVE-2015-6832</cve>
	<bugzilla href="https://bugzilla.suse.com/942293">SUSE bug 942293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945189">SUSE bug 945189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781768" comment="php7-embed is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6834</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6834" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6834" ref_url="https://www.suse.com/security/cve/CVE-2015-6834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00025.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6834/">CVE-2015-6834</cve>
	<bugzilla href="https://bugzilla.suse.com/1015191">SUSE bug 1015191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945403">SUSE bug 945403</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781768" comment="php7-embed is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6835</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6835" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6835" ref_url="https://www.suse.com/security/cve/CVE-2015-6835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00025.html" source="SUSE-SU"/>
    <description>
    The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6835/">CVE-2015-6835</cve>
	<bugzilla href="https://bugzilla.suse.com/945402">SUSE bug 945402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781768" comment="php7-embed is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6855</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6855" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6855" ref_url="https://www.suse.com/security/cve/CVE-2015-6855" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6855/">CVE-2015-6855</cve>
	<bugzilla href="https://bugzilla.suse.com/945404">SUSE bug 945404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965156">SUSE bug 965156</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6908</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6908" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6908" ref_url="https://www.suse.com/security/cve/CVE-2015-6908" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0224-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html" source="SUSE-SU"/>
    <description>
    The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6908/">CVE-2015-6908</cve>
	<bugzilla href="https://bugzilla.suse.com/945582">SUSE bug 945582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487776" comment="openldap2-devel-32bit-2.4.46-9.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481417" comment="libldap-2_4-2-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481418" comment="libldap-2_4-2-32bit-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481419" comment="openldap2-client-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481420" comment="openldap2-devel-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481421" comment="openldap2-devel-static-2.4.46-9.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488058" comment="openldap2-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488059" comment="openldap2-back-meta-2.4.46-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488060" comment="openldap2-back-perl-2.4.46-9.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6937</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-6937" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6937" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-6937" ref_url="https://www.suse.com/security/cve/CVE-2015-6937" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2350-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0337-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6937/">CVE-2015-6937</cve>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923755">SUSE bug 923755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945825">SUSE bug 945825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952384">SUSE bug 952384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953052">SUSE bug 953052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963994">SUSE bug 963994</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7174</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7174" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7174" ref_url="https://www.suse.com/security/cve/CVE-2015-7174" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7174/">CVE-2015-7174</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7175</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7175" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7175" ref_url="https://www.suse.com/security/cve/CVE-2015-7175" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7175/">CVE-2015-7175</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7176</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7176" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7176" ref_url="https://www.suse.com/security/cve/CVE-2015-7176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7176/">CVE-2015-7176</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7177</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7177" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7177" ref_url="https://www.suse.com/security/cve/CVE-2015-7177" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7177/">CVE-2015-7177</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7178</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7178" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7178" ref_url="https://www.suse.com/security/cve/CVE-2015-7178" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted (1) OpenGL or (2) WebGL content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7178/">CVE-2015-7178</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7179</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7179" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7179" ref_url="https://www.suse.com/security/cve/CVE-2015-7179" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted (1) OpenGL or (2) WebGL content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-24"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7179/">CVE-2015-7179</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7180</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7180" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7180" ref_url="https://www.suse.com/security/cve/CVE-2015-7180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1680-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1681-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html" source="SUSE-SU"/>
    <description>
    The ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 misinterprets the return value of a function call, which might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7180/">CVE-2015-7180</cve>
	<bugzilla href="https://bugzilla.suse.com/947003">SUSE bug 947003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7181</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7181" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7181" ref_url="https://www.suse.com/security/cve/CVE-2015-7181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, improperly restricts access to an unspecified data structure, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data, related to a "use-after-poison" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7181/">CVE-2015-7181</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7182</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7182" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7182" ref_url="https://www.suse.com/security/cve/CVE-2015-7182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7182/">CVE-2015-7182</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7183</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7183" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7183" ref_url="https://www.suse.com/security/cve/CVE-2015-7183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7183/">CVE-2015-7183</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962977">SUSE bug 962977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481597" comment="mozilla-nspr-4.20-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481598" comment="mozilla-nspr-32bit-4.20-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481599" comment="mozilla-nspr-devel-4.20-3.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7184</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7184" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7184" ref_url="https://www.suse.com/security/cve/CVE-2015-7184" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1817-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00021.html" source="SUSE-SU"/>
    <description>
    The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7184/">CVE-2015-7184</cve>
	<bugzilla href="https://bugzilla.suse.com/950686">SUSE bug 950686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7185</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7185" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7185" ref_url="https://www.suse.com/security/cve/CVE-2015-7185" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 on Android does not ensure that the address bar is restored upon fullscreen-mode exit, which allows remote attackers to spoof the address bar via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7185/">CVE-2015-7185</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7186</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7186" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7186" ref_url="https://www.suse.com/security/cve/CVE-2015-7186" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 on Android allows user-assisted remote attackers to bypass the Same Origin Policy and trigger (1) a download or (2) cached profile-data reading via a file: URL in a saved HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7186/">CVE-2015-7186</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7187</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7187" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7187" ref_url="https://www.suse.com/security/cve/CVE-2015-7187" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7187/">CVE-2015-7187</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7188</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7188" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7188" ref_url="https://www.suse.com/security/cve/CVE-2015-7188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the Same Origin Policy for an IP address origin, and conduct cross-site scripting (XSS) attacks, by appending whitespace characters to an IP address string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7188/">CVE-2015-7188</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7189</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7189" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7189" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7189" ref_url="https://www.suse.com/security/cve/CVE-2015-7189" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via vectors involving a CANVAS element and crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7189/">CVE-2015-7189</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7190</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7190" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7190" ref_url="https://www.suse.com/security/cve/CVE-2015-7190" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration through an intent and can access this URL in a privileged context in conjunction with the crash reporter, which allows attackers to read log files and visit file: URLs of HTML documents via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7190/">CVE-2015-7190</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7191</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7191" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7191" ref_url="https://www.suse.com/security/cve/CVE-2015-7191" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 on Android improperly restricts URL strings in intents, which allows attackers to conduct cross-site scripting (XSS) attacks via vectors involving an intent: URL and fallback navigation, aka "Universal XSS (UXSS)."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7191/">CVE-2015-7191</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7192</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7192" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7192" ref_url="https://www.suse.com/security/cve/CVE-2015-7192" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value to reference a row index.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7192/">CVE-2015-7192</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7193</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7193" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7193" ref_url="https://www.suse.com/security/cve/CVE-2015-7193" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack of a preflight-request step.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7193/">CVE-2015-7193</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7194</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7194" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7194" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7194" ref_url="https://www.suse.com/security/cve/CVE-2015-7194" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7194/">CVE-2015-7194</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7195</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7195" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7195" ref_url="https://www.suse.com/security/cve/CVE-2015-7195" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
    <description>
    The URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped characters in hostnames within Location headers, which allows remote attackers to obtain sensitive information via vectors involving a redirect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7195/">CVE-2015-7195</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7196</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7196" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7196" ref_url="https://www.suse.com/security/cve/CVE-2015-7196" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service (incorrect garbage collection and application crash) or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript wrapper.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7196/">CVE-2015-7196</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7197</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7197" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7197" ref_url="https://www.suse.com/security/cve/CVE-2015-7197" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7197/">CVE-2015-7197</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7198</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7198" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7198" ref_url="https://www.suse.com/security/cve/CVE-2015-7198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted texture data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7198/">CVE-2015-7198</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7199</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7199" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7199" ref_url="https://www.suse.com/security/cve/CVE-2015-7199" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted SVG document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7199/">CVE-2015-7199</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7200</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7200" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7200" ref_url="https://www.suse.com/security/cve/CVE-2015-7200" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1926-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html" source="SUSE-SU"/>
    <description>
    The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7200/">CVE-2015-7200</cve>
	<bugzilla href="https://bugzilla.suse.com/952810">SUSE bug 952810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7201</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7201" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7201" ref_url="https://www.suse.com/security/cve/CVE-2015-7201" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-7201/">CVE-2015-7201</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7202</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7202" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7202" ref_url="https://www.suse.com/security/cve/CVE-2015-7202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-7202/">CVE-2015-7202</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7203</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7203" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7203" ref_url="https://www.suse.com/security/cve/CVE-2015-7203" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes/gfxDWriteFontList.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted font-family name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7203/">CVE-2015-7203</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7204</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7204" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7204" ref_url="https://www.suse.com/security/cve/CVE-2015-7204" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which allows remote attackers to execute arbitrary code via crafted JavaScript variable assignments.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7204/">CVE-2015-7204</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7205</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7205" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7205" ref_url="https://www.suse.com/security/cve/CVE-2015-7205" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a crafted WebRTC RTP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-7205/">CVE-2015-7205</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7207</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7207" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7207" ref_url="https://www.suse.com/security/cve/CVE-2015-7207" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls, a related issue to CVE-2015-1300.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7207/">CVE-2015-7207</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7208</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7208" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7208" ref_url="https://www.suse.com/security/cve/CVE-2015-7208" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7208/">CVE-2015-7208</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963637">SUSE bug 963637</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7210</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7210" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7210" ref_url="https://www.suse.com/security/cve/CVE-2015-7210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering attempted use of a data channel that has been closed by a WebRTC function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7210/">CVE-2015-7210</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7211</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7211" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7211" ref_url="https://www.suse.com/security/cve/CVE-2015-7211" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7211/">CVE-2015-7211</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7212</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7212" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7212" ref_url="https://www.suse.com/security/cve/CVE-2015-7212" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering a graphics operation that requires a large texture allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-24"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7212/">CVE-2015-7212</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7213</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7213" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7213" ref_url="https://www.suse.com/security/cve/CVE-2015-7213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7213/">CVE-2015-7213</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7214</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7214" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7214" ref_url="https://www.suse.com/security/cve/CVE-2015-7214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7214/">CVE-2015-7214</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7215</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7215" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7215" ref_url="https://www.suse.com/security/cve/CVE-2015-7215" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception, leading to information disclosure after a rethrow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7215/">CVE-2015-7215</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7216</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7216" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7216" ref_url="https://www.suse.com/security/cve/CVE-2015-7216" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7216/">CVE-2015-7216</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7217</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7217" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7217" ref_url="https://www.suse.com/security/cve/CVE-2015-7217" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted Truevision TGA image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7217/">CVE-2015-7217</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7218</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7218" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7218" ref_url="https://www.suse.com/security/cve/CVE-2015-7218" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a single-byte header frame that triggers incorrect memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7218/">CVE-2015-7218</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7219</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7219" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7219" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7219" ref_url="https://www.suse.com/security/cve/CVE-2015-7219" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a malformed PushPromise frame that triggers decompressed-buffer length miscalculation and incorrect memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7219/">CVE-2015-7219</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7220</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7220" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7220" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7220" ref_url="https://www.suse.com/security/cve/CVE-2015-7220" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7220/">CVE-2015-7220</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7221</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7221" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7221" ref_url="https://www.suse.com/security/cve/CVE-2015-7221" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a deque size change.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7221/">CVE-2015-7221</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7222</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7222" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7222" ref_url="https://www.suse.com/security/cve/CVE-2015-7222" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect memory allocation and application crash) via an MP4 video file with crafted covr metadata that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7222/">CVE-2015-7222</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7223</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7223" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7223" ref_url="https://www.suse.com/security/cve/CVE-2015-7223" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2353-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The WebExtension APIs in Mozilla Firefox before 43.0 allow remote attackers to gain privileges, and possibly obtain sensitive information or conduct cross-site scripting (XSS) attacks, via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7223/">CVE-2015-7223</cve>
	<bugzilla href="https://bugzilla.suse.com/959277">SUSE bug 959277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7236</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7236" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7236" ref_url="https://www.suse.com/security/cve/CVE-2015-7236" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1705-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1705-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1706-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001623.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted packets, involving a PMAP_CALLIT code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7236/">CVE-2015-7236</cve>
	<bugzilla href="https://bugzilla.suse.com/940191">SUSE bug 940191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/946204">SUSE bug 946204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979097">SUSE bug 979097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481649" comment="rpcbind-0.2.3-5.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7295</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7295" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7295" ref_url="https://www.suse.com/security/cve/CVE-2015-7295" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
    <description>
    hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7295/">CVE-2015-7295</cve>
	<bugzilla href="https://bugzilla.suse.com/947159">SUSE bug 947159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7311</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7311" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7311" ref_url="https://www.suse.com/security/cve/CVE-2015-7311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device model, which allows local guest users to write to a read-only disk image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7311/">CVE-2015-7311</cve>
	<bugzilla href="https://bugzilla.suse.com/947165">SUSE bug 947165</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7496</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7496" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7496" ref_url="https://www.suse.com/security/cve/CVE-2015-7496" source="SUSE CVE"/>
    <description>
    GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7496/">CVE-2015-7496</cve>
	<bugzilla href="https://bugzilla.suse.com/955552">SUSE bug 955552</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486606" comment="gdm-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486607" comment="gdm-devel-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486608" comment="gdm-lang-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486609" comment="gdmflexiserver-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486610" comment="libgdm1-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486611" comment="typelib-1_0-Gdm-1_0-3.26.2.1-13.19.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7497</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7497" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7497" ref_url="https://www.suse.com/security/cve/CVE-2015-7497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7497/">CVE-2015-7497</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957106">SUSE bug 957106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969769">SUSE bug 969769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7498</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7498" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7498" ref_url="https://www.suse.com/security/cve/CVE-2015-7498" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7498/">CVE-2015-7498</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957107">SUSE bug 957107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969769">SUSE bug 969769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7499</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7499" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7499" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7499" ref_url="https://www.suse.com/security/cve/CVE-2015-7499" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7499/">CVE-2015-7499</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957109">SUSE bug 957109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969769">SUSE bug 969769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7500</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7500" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7500" ref_url="https://www.suse.com/security/cve/CVE-2015-7500" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7500/">CVE-2015-7500</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957110">SUSE bug 957110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969769">SUSE bug 969769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7504</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7504" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7504" ref_url="https://www.suse.com/security/cve/CVE-2015-7504" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7504/">CVE-2015-7504</cve>
	<bugzilla href="https://bugzilla.suse.com/956411">SUSE bug 956411</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7510</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7510" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7510" ref_url="https://www.suse.com/security/cve/CVE-2015-7510" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7510/">CVE-2015-7510</cve>
	<bugzilla href="https://bugzilla.suse.com/956712">SUSE bug 956712</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481501" comment="libsystemd0-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481502" comment="libsystemd0-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481503" comment="libudev-devel-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481504" comment="libudev1-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481505" comment="libudev1-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481506" comment="systemd-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481507" comment="systemd-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481508" comment="systemd-bash-completion-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481509" comment="systemd-container-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481510" comment="systemd-coredump-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481511" comment="systemd-devel-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481512" comment="systemd-sysvinit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481513" comment="udev-234-24.25.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7511</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7511" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7511" ref_url="https://www.suse.com/security/cve/CVE-2015-7511" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/002017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0575-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00151.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1227-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00027.html" source="SUSE-SU"/>
    <description>
    Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7511/">CVE-2015-7511</cve>
	<bugzilla href="https://bugzilla.suse.com/965902">SUSE bug 965902</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481367" comment="libgcrypt-devel-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481368" comment="libgcrypt20-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481369" comment="libgcrypt20-32bit-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481370" comment="libgcrypt20-hmac-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481371" comment="libgcrypt20-hmac-32bit-1.8.2-6.7 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7512</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7512" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7512" ref_url="https://www.suse.com/security/cve/CVE-2015-7512" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001778.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7512/">CVE-2015-7512</cve>
	<bugzilla href="https://bugzilla.suse.com/957162">SUSE bug 957162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962360">SUSE bug 962360</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7513</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7513" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7513" ref_url="https://www.suse.com/security/cve/CVE-2015-7513" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3069-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html" source="SUSE-SU"/>
    <description>
    arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7513/">CVE-2015-7513</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960689">SUSE bug 960689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987709">SUSE bug 987709</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7547</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7547" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7547" ref_url="https://www.suse.com/security/cve/CVE-2015-7547" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID7017265" ref_url="https://www.suse.com/support/kb/doc?id=7017265" source="SUSE-SU"/>
		<reference ref_id="TID7017273" ref_url="https://www.suse.com/support/kb/doc/?id=7017273" source="SUSE-SU"/>
		<reference ref_id="TID7017287" ref_url="https://www.suse.com/support/kb/doc?id=7017287" source="SUSE-SU"/>
		<reference ref_id="TID7017315" ref_url="https://www.suse.com/support/kb/doc/?id=7017315" source="SUSE-SU"/>
		<reference ref_id="TID7017329" ref_url="https://www.suse.com/support/kb/doc/?id=7017329" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7022077" ref_url="https://www.suse.com/support/kb/doc/?id=7022077" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0512-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00044.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7547/">CVE-2015-7547</cve>
	<bugzilla href="https://bugzilla.suse.com/1077097">SUSE bug 1077097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/847227">SUSE bug 847227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961721">SUSE bug 961721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967023">SUSE bug 967023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967061">SUSE bug 967061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967072">SUSE bug 967072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967496">SUSE bug 967496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969216">SUSE bug 969216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969241">SUSE bug 969241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969591">SUSE bug 969591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986086">SUSE bug 986086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7549</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7549" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7549" ref_url="https://www.suse.com/security/cve/CVE-2015-7549" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7549/">CVE-2015-7549</cve>
	<bugzilla href="https://bugzilla.suse.com/958917">SUSE bug 958917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958918">SUSE bug 958918</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7552</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7552" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7552" ref_url="https://www.suse.com/security/cve/CVE-2015-7552" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001824.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001835.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0897-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1467-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the gdk_pixbuf_flip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7552/">CVE-2015-7552</cve>
	<bugzilla href="https://bugzilla.suse.com/958963">SUSE bug 958963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480251" comment="gdk-pixbuf-devel-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480252" comment="gdk-pixbuf-lang-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480253" comment="gdk-pixbuf-query-loaders-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480254" comment="gdk-pixbuf-thumbnailer-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480255" comment="libgdk_pixbuf-2_0-0-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480256" comment="typelib-1_0-GdkPixbuf-2_0-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482688" comment="gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482689" comment="libgdk_pixbuf-2_0-0-32bit-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7554</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7554" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7554" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7554" ref_url="https://www.suse.com/security/cve/CVE-2015-7554" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001808.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0073-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0215-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0252-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html" source="SUSE-SU"/>
    <description>
    The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7554/">CVE-2015-7554</cve>
	<bugzilla href="https://bugzilla.suse.com/1007276">SUSE bug 1007276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017690">SUSE bug 1017690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1040322">SUSE bug 1040322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960341">SUSE bug 960341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974621">SUSE bug 974621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983436">SUSE bug 983436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7555</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7555" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7555" ref_url="https://www.suse.com/security/cve/CVE-2015-7555" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0202-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001821.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0201-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0289-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00117.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and logical screen width fields in a GIF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7555/">CVE-2015-7555</cve>
	<bugzilla href="https://bugzilla.suse.com/960319">SUSE bug 960319</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480262" comment="giflib-devel-5.1.4-2.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480263" comment="libgif7-5.1.4-2.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7560</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7560" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7560" ref_url="https://www.suse.com/security/cve/CVE-2015-7560" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0816-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0837-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0877-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-7560/">CVE-2015-7560</cve>
	<bugzilla href="https://bugzilla.suse.com/968222">SUSE bug 968222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7566</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7566" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7566" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7566" ref_url="https://www.suse.com/security/cve/CVE-2015-7566" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a bulk-out endpoint.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7566/">CVE-2015-7566</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961512">SUSE bug 961512</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7575</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7575" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7575" ref_url="https://www.suse.com/security/cve/CVE-2015-7575" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001807.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001818.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00139.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0007-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0161-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00166.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7575/">CVE-2015-7575</cve>
	<bugzilla href="https://bugzilla.suse.com/959888">SUSE bug 959888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960402">SUSE bug 960402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960996">SUSE bug 960996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961280">SUSE bug 961280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961281">SUSE bug 961281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961282">SUSE bug 961282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961283">SUSE bug 961283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961284">SUSE bug 961284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961290">SUSE bug 961290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961357">SUSE bug 961357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962743">SUSE bug 962743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967521">SUSE bug 967521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981087">SUSE bug 981087</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7613</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7613" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7613" ref_url="https://www.suse.com/security/cve/CVE-2015-7613" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2085-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2087-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2090-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2091-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html" source="SUSE-SU"/>
    <description>
    Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7613/">CVE-2015-7613</cve>
	<bugzilla href="https://bugzilla.suse.com/923755">SUSE bug 923755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/948536">SUSE bug 948536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/948701">SUSE bug 948701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963994">SUSE bug 963994</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7665</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7665" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7665" ref_url="https://www.suse.com/security/cve/CVE-2015-7665" source="SUSE CVE"/>
    <description>
    Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a (1) PORT or (2) EPRT command.  NOTE: within wget itself, the automatic fallback is not considered a vulnerability by CVE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7665/">CVE-2015-7665</cve>
	<bugzilla href="https://bugzilla.suse.com/944858">SUSE bug 944858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481671" comment="wget-1.19.5-3.6.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7673</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7673" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7673" ref_url="https://www.suse.com/security/cve/CVE-2015-7673" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001719.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2195-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001761.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0897-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1467-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html" source="SUSE-SU"/>
    <description>
    io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7673/">CVE-2015-7673</cve>
	<bugzilla href="https://bugzilla.suse.com/948790">SUSE bug 948790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480251" comment="gdk-pixbuf-devel-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480252" comment="gdk-pixbuf-lang-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480253" comment="gdk-pixbuf-query-loaders-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480254" comment="gdk-pixbuf-thumbnailer-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480255" comment="libgdk_pixbuf-2_0-0-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480256" comment="typelib-1_0-GdkPixbuf-2_0-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482688" comment="gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482689" comment="libgdk_pixbuf-2_0-0-32bit-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7674</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7674" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7674" ref_url="https://www.suse.com/security/cve/CVE-2015-7674" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-October/001638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001719.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2195-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001761.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0897-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1467-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7674/">CVE-2015-7674</cve>
	<bugzilla href="https://bugzilla.suse.com/948791">SUSE bug 948791</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480251" comment="gdk-pixbuf-devel-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480252" comment="gdk-pixbuf-lang-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480253" comment="gdk-pixbuf-query-loaders-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480254" comment="gdk-pixbuf-thumbnailer-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480255" comment="libgdk_pixbuf-2_0-0-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480256" comment="typelib-1_0-GdkPixbuf-2_0-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482688" comment="gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482689" comment="libgdk_pixbuf-2_0-0-32bit-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7691</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7691" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7691" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7691" ref_url="https://www.suse.com/security/cve/CVE-2015-7691" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations.  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7691/">CVE-2015-7691</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911792">SUSE bug 911792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7692</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7692" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7692" ref_url="https://www.suse.com/security/cve/CVE-2015-7692" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7692/">CVE-2015-7692</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911792">SUSE bug 911792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7696</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7696" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7696" ref_url="https://www.suse.com/security/cve/CVE-2015-7696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2529-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00013.html" source="SUSE-SU"/>
    <description>
    Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7696/">CVE-2015-7696</cve>
	<bugzilla href="https://bugzilla.suse.com/1159417">SUSE bug 1159417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950110">SUSE bug 950110</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7697</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7697" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7697" ref_url="https://www.suse.com/security/cve/CVE-2015-7697" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2529-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00013.html" source="SUSE-SU"/>
    <description>
    Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty bzip2 data in a ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7697/">CVE-2015-7697</cve>
	<bugzilla href="https://bugzilla.suse.com/1159417">SUSE bug 1159417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950110">SUSE bug 950110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950111">SUSE bug 950111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7701</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7701" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7701" ref_url="https://www.suse.com/security/cve/CVE-2015-7701" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7701/">CVE-2015-7701</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7702</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7702" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7702" ref_url="https://www.suse.com/security/cve/CVE-2015-7702" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7702/">CVE-2015-7702</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/911792">SUSE bug 911792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7703</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7703" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7703" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7703" ref_url="https://www.suse.com/security/cve/CVE-2015-7703" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7703/">CVE-2015-7703</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943216">SUSE bug 943216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943218">SUSE bug 943218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943219">SUSE bug 943219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/943221">SUSE bug 943221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7704</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7704" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7704" ref_url="https://www.suse.com/security/cve/CVE-2015-7704" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7704/">CVE-2015-7704</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952611">SUSE bug 952611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977446">SUSE bug 977446</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7705</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7705" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7705" ref_url="https://www.suse.com/security/cve/CVE-2015-7705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7705/">CVE-2015-7705</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952611">SUSE bug 952611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7744</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7744" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7744" ref_url="https://www.suse.com/security/cve/CVE-2015-7744" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
    <description>
    wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-7744/">CVE-2015-7744</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7747</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7747" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7747" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7747" ref_url="https://www.suse.com/security/cve/CVE-2015-7747" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1903-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00029.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7747/">CVE-2015-7747</cve>
	<bugzilla href="https://bugzilla.suse.com/949399">SUSE bug 949399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337607" comment="audiofile-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009353561" comment="libaudiofile1 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7799</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7799" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7799" ref_url="https://www.suse.com/security/cve/CVE-2015-7799" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2350-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0585-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7799/">CVE-2015-7799</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052256">SUSE bug 1052256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/949936">SUSE bug 949936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951638">SUSE bug 951638</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7805</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7805" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7805" ref_url="https://www.suse.com/security/cve/CVE-2015-7805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1979-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2000-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1995-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2119-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00145.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7805/">CVE-2015-7805</cve>
	<bugzilla href="https://bugzilla.suse.com/953516">SUSE bug 953516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953519">SUSE bug 953519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481480" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7810</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7810" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7810" ref_url="https://www.suse.com/security/cve/CVE-2015-7810" source="SUSE CVE"/>
    <description>
    libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-7810/">CVE-2015-7810</cve>
	<bugzilla href="https://bugzilla.suse.com/1160757">SUSE bug 1160757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338889" comment="libbluray-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009714937" comment="libbluray2 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7830</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7830" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7830" ref_url="https://www.suse.com/security/cve/CVE-2015-7830" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1836-2" ref_url="https://lists.opensuse.org/opensuse-updates/2015-10/msg00057.html" source="SUSE-SU"/>
    <description>
    The pcapng_read_if_descr_block function in wiretap/pcapng.c in the pcapng parser in Wireshark 1.12.x before 1.12.8 uses too many levels of pointer indirection, which allows remote attackers to cause a denial of service (incorrect free and application crash) via a crafted packet that triggers interface-filter copying.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7830/">CVE-2015-7830</cve>
	<bugzilla href="https://bugzilla.suse.com/950437">SUSE bug 950437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7833</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7833" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7833" ref_url="https://www.suse.com/security/cve/CVE-2015-7833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html" source="SUSE-SU"/>
    <description>
    The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux (RHEL) 7.1 allows physically proximate attackers to cause a denial of service (panic) via a nonzero bInterfaceNumber value in a USB device descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7833/">CVE-2015-7833</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950998">SUSE bug 950998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7835</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7835" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7835" ref_url="https://www.suse.com/security/cve/CVE-2015-7835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html" source="SUSE-SU"/>
    <description>
    The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7835/">CVE-2015-7835</cve>
	<bugzilla href="https://bugzilla.suse.com/940929">SUSE bug 940929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/947159">SUSE bug 947159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950367">SUSE bug 950367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7848</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7848" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7848" ref_url="https://www.suse.com/security/cve/CVE-2015-7848" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7848/">CVE-2015-7848</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157849" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7849</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7849" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7849" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7849" ref_url="https://www.suse.com/security/cve/CVE-2015-7849" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7849/">CVE-2015-7849</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7850</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7850" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7850" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7850" ref_url="https://www.suse.com/security/cve/CVE-2015-7850" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7850/">CVE-2015-7850</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7851</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7851" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7851" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7851" ref_url="https://www.suse.com/security/cve/CVE-2015-7851" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-7851/">CVE-2015-7851</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7852</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7852" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7852" ref_url="https://www.suse.com/security/cve/CVE-2015-7852" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7852/">CVE-2015-7852</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7853</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7853" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7853" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7853" ref_url="https://www.suse.com/security/cve/CVE-2015-7853" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7853/">CVE-2015-7853</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157854" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7854</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7854" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7854" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7854" ref_url="https://www.suse.com/security/cve/CVE-2015-7854" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7854/">CVE-2015-7854</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7855</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7855" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7855" ref_url="https://www.suse.com/security/cve/CVE-2015-7855" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7855/">CVE-2015-7855</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157871" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7871</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7871" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7871" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7871" ref_url="https://www.suse.com/security/cve/CVE-2015-7871" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2016-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7871/">CVE-2015-7871</cve>
	<bugzilla href="https://bugzilla.suse.com/1010964">SUSE bug 1010964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952606">SUSE bug 952606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7884</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7884" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7884" ref_url="https://www.suse.com/security/cve/CVE-2015-7884" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html" source="SUSE-SU"/>
    <description>
    The vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7884/">CVE-2015-7884</cve>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951626">SUSE bug 951626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951627">SUSE bug 951627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7885</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7885" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7885" ref_url="https://www.suse.com/security/cve/CVE-2015-7885" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
    <description>
    The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7885/">CVE-2015-7885</cve>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951626">SUSE bug 951626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951627">SUSE bug 951627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157941" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7941</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7941" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7941" ref_url="https://www.suse.com/security/cve/CVE-2015-7941" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7941/">CVE-2015-7941</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951734">SUSE bug 951734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951735">SUSE bug 951735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969769">SUSE bug 969769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7942</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7942" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7942" ref_url="https://www.suse.com/security/cve/CVE-2015-7942" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7942/">CVE-2015-7942</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951735">SUSE bug 951735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969769">SUSE bug 969769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7969</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7969" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7969" ref_url="https://www.suse.com/security/cve/CVE-2015-7969" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service (memory consumption) via a large number of "teardowns" of domains with the vcpu pointer array allocated using the (1) XEN_DOMCTL_max_vcpus hypercall or the xenoprofile state vcpu pointer array allocated using the (2) XENOPROF_get_buffer or (3) XENOPROF_set_passive hypercall.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7969/">CVE-2015-7969</cve>
	<bugzilla href="https://bugzilla.suse.com/950703">SUSE bug 950703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950705">SUSE bug 950705</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7970</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7970" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7970" ref_url="https://www.suse.com/security/cve/CVE-2015-7970" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service (CPU consumption and possibly reboot) via crafted memory contents that triggers a "time-consuming linear scan," related to Populate-on-Demand.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7970/">CVE-2015-7970</cve>
	<bugzilla href="https://bugzilla.suse.com/950704">SUSE bug 950704</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7971</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7971" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7971" ref_url="https://www.suse.com/security/cve/CVE-2015-7971" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1952-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
    <description>
    Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local guests to cause a denial of service via a sequence of crafted (1) HYPERCALL_xenoprof_op hypercalls, which are not properly handled in the do_xenoprof_op function in common/xenoprof.c, or (2) HYPERVISOR_xenpmu_op hypercalls, which are not properly handled in the do_xenpmu_op function in arch/x86/cpu/vpmu.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7971/">CVE-2015-7971</cve>
	<bugzilla href="https://bugzilla.suse.com/950706">SUSE bug 950706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7972</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7972" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7972" ref_url="https://www.suse.com/security/cve/CVE-2015-7972" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00023.html" source="SUSE-SU"/>
    <description>
    The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl_dom.c in Xen 3.4.x through 4.6.x do not properly calculate the balloon size when using the populate-on-demand (PoD) system, which allows local HVM guest users to cause a denial of service (guest crash) via unspecified vectors related to "heavy memory pressure."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7972/">CVE-2015-7972</cve>
	<bugzilla href="https://bugzilla.suse.com/950704">SUSE bug 950704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951845">SUSE bug 951845</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7973</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7973" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7973" ref_url="https://www.suse.com/security/cve/CVE-2015-7973" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2015-7973/">CVE-2015-7973</cve>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962995">SUSE bug 962995</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7974</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7974" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7974" ref_url="https://www.suse.com/security/cve/CVE-2015-7974" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-7974/">CVE-2015-7974</cve>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962960">SUSE bug 962960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962995">SUSE bug 962995</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7975</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7975" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7975" ref_url="https://www.suse.com/security/cve/CVE-2015-7975" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7975/">CVE-2015-7975</cve>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962988">SUSE bug 962988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962995">SUSE bug 962995</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7976</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7976" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7976" ref_url="https://www.suse.com/security/cve/CVE-2015-7976" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7976/">CVE-2015-7976</cve>
	<bugzilla href="https://bugzilla.suse.com/962802">SUSE bug 962802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962995">SUSE bug 962995</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7977</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7977" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7977" ref_url="https://www.suse.com/security/cve/CVE-2015-7977" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7977/">CVE-2015-7977</cve>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962970">SUSE bug 962970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962995">SUSE bug 962995</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7978</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7978" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7978" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7978" ref_url="https://www.suse.com/security/cve/CVE-2015-7978" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7978/">CVE-2015-7978</cve>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962970">SUSE bug 962970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962995">SUSE bug 962995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963000">SUSE bug 963000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7979</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7979" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7979" ref_url="https://www.suse.com/security/cve/CVE-2015-7979" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7979/">CVE-2015-7979</cve>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962784">SUSE bug 962784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962995">SUSE bug 962995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977459">SUSE bug 977459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982065">SUSE bug 982065</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7990</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7990" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7990" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7990" ref_url="https://www.suse.com/security/cve/CVE-2015-7990" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2350-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0337-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6937.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7990/">CVE-2015-7990</cve>
	<bugzilla href="https://bugzilla.suse.com/945825">SUSE bug 945825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952384">SUSE bug 952384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953052">SUSE bug 953052</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7995</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-7995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7995" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-7995" ref_url="https://www.suse.com/security/cve/CVE-2015-7995" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00123.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1390-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00079.html" source="SUSE-SU"/>
    <description>
    The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7995/">CVE-2015-7995</cve>
	<bugzilla href="https://bugzilla.suse.com/1123130">SUSE bug 1123130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952474">SUSE bug 952474</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480825" comment="libxslt-devel-1.1.32-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480826" comment="libxslt-tools-1.1.32-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480827" comment="libxslt1-1.1.32-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8000</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8000" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8000" ref_url="https://www.suse.com/security/cve/CVE-2015-8000" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2341-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0227-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2365-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00042.html" source="SUSE-SU"/>
    <description>
    db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8000/">CVE-2015-8000</cve>
	<bugzilla href="https://bugzilla.suse.com/944066">SUSE bug 944066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958861">SUSE bug 958861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8019</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8019" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8019" ref_url="https://www.suse.com/security/cve/CVE-2015-8019" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2009-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html" source="SUSE-SU"/>
    <description>
    The skb_copy_and_csum_datagram_iovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a write system call followed by a recvmsg system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-01"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8019/">CVE-2015-8019</cve>
	<bugzilla href="https://bugzilla.suse.com/1032268">SUSE bug 1032268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951199">SUSE bug 951199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/952587">SUSE bug 952587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979078">SUSE bug 979078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8023</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8023" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8023" ref_url="https://www.suse.com/security/cve/CVE-2015-8023" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2183-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001715.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2103-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html" source="SUSE-SU"/>
    <description>
    The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8023/">CVE-2015-8023</cve>
	<bugzilla href="https://bugzilla.suse.com/953817">SUSE bug 953817</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8025</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8025" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8025" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8025" ref_url="https://www.suse.com/security/cve/CVE-2015-8025" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2053-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001769.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001686.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2032-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00102.html" source="SUSE-SU"/>
    <description>
    driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8025/">CVE-2015-8025</cve>
	<bugzilla href="https://bugzilla.suse.com/952062">SUSE bug 952062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480971" comment="xscreensaver-5.37-3.51 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480972" comment="xscreensaver-data-5.37-3.51 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480973" comment="xscreensaver-lang-5.37-3.51 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8035</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8035" ref_url="https://www.suse.com/security/cve/CVE-2015-8035" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8035/">CVE-2015-8035</cve>
	<bugzilla href="https://bugzilla.suse.com/1088279">SUSE bug 1088279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105166">SUSE bug 1105166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954429">SUSE bug 954429</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8041</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8041" ref_url="https://www.suse.com/security/cve/CVE-2015-8041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002272.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8041/">CVE-2015-8041</cve>
	<bugzilla href="https://bugzilla.suse.com/937419">SUSE bug 937419</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334489" comment="wpa_supplicant is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8075</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8075" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8075" ref_url="https://www.suse.com/security/cve/CVE-2015-8075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2000-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001763.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1995-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2119-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00145.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8075/">CVE-2015-8075</cve>
	<bugzilla href="https://bugzilla.suse.com/953516">SUSE bug 953516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953519">SUSE bug 953519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481480" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8104</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8104" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8104" ref_url="https://www.suse.com/security/cve/CVE-2015-8104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2350-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2250-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8104/">CVE-2015-8104</cve>
	<bugzilla href="https://bugzilla.suse.com/1215748">SUSE bug 1215748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/953527">SUSE bug 953527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954018">SUSE bug 954018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954404">SUSE bug 954404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/954405">SUSE bug 954405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962977">SUSE bug 962977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8126</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8126" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8126" ref_url="https://www.suse.com/security/cve/CVE-2015-8126" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001779.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001789.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001790.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2136-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2262-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2263-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0103-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0104-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0105-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0684-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0729-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00046.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8126/">CVE-2015-8126</cve>
	<bugzilla href="https://bugzilla.suse.com/954980">SUSE bug 954980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958198">SUSE bug 958198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960402">SUSE bug 960402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962743">SUSE bug 962743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969333">SUSE bug 969333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8138</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8138" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8138" ref_url="https://www.suse.com/security/cve/CVE-2015-8138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-8138/">CVE-2015-8138</cve>
	<bugzilla href="https://bugzilla.suse.com/951608">SUSE bug 951608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963002">SUSE bug 963002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974668">SUSE bug 974668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977446">SUSE bug 977446</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8158</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8158" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8158" ref_url="https://www.suse.com/security/cve/CVE-2015-8158" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8158/">CVE-2015-8158</cve>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962966">SUSE bug 962966</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8216</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8216" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8216" ref_url="https://www.suse.com/security/cve/CVE-2015-8216" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html" source="SUSE-SU"/>
    <description>
    The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted MJPEG data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8216/">CVE-2015-8216</cve>
	<bugzilla href="https://bugzilla.suse.com/955346">SUSE bug 955346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8217</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8217" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8217" ref_url="https://www.suse.com/security/cve/CVE-2015-8217" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html" source="SUSE-SU"/>
    <description>
    The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted High Efficiency Video Coding (HEVC) data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8217/">CVE-2015-8217</cve>
	<bugzilla href="https://bugzilla.suse.com/955347">SUSE bug 955347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8218</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8218" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8218" ref_url="https://www.suse.com/security/cve/CVE-2015-8218" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html" source="SUSE-SU"/>
    <description>
    The decode_uncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not validate uncompressed runs, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted CCITT FAX data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8218/">CVE-2015-8218</cve>
	<bugzilla href="https://bugzilla.suse.com/955348">SUSE bug 955348</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8219</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8219" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8219" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8219" ref_url="https://www.suse.com/security/cve/CVE-2015-8219" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html" source="SUSE-SU"/>
    <description>
    The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8219/">CVE-2015-8219</cve>
	<bugzilla href="https://bugzilla.suse.com/955350">SUSE bug 955350</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8242</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8242" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8242" ref_url="https://www.suse.com/security/cve/CVE-2015-8242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001780.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2372-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html" source="SUSE-SU"/>
    <description>
    The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8242/">CVE-2015-8242</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/956021">SUSE bug 956021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959469">SUSE bug 959469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969769">SUSE bug 969769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8324</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8324" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8324" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8324" ref_url="https://www.suse.com/security/cve/CVE-2015-8324" source="SUSE CVE"/>
    <description>
    The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8324/">CVE-2015-8324</cve>
	<bugzilla href="https://bugzilla.suse.com/956707">SUSE bug 956707</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8325</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8325" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8325" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8325" ref_url="https://www.suse.com/security/cve/CVE-2015-8325" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002338.html" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1455-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00132.html" source="SUSE-SU"/>
    <description>
    The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8325/">CVE-2015-8325</cve>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975865">SUSE bug 975865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996040">SUSE bug 996040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488406" comment="openssh-fips-7.9p1-4.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481607" comment="openssh-7.9p1-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481608" comment="openssh-helpers-7.9p1-4.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158327" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8327</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8327" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8327" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8327" ref_url="https://www.suse.com/security/cve/CVE-2015-8327" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001794.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001799.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2367-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00115.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0179-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00065.html" source="SUSE-SU"/>
    <description>
    Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8327/">CVE-2015-8327</cve>
	<bugzilla href="https://bugzilla.suse.com/1027197">SUSE bug 1027197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957531">SUSE bug 957531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8339</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8339" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8339" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8339" ref_url="https://www.suse.com/security/cve/CVE-2015-8339" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
    <description>
    The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domain, which might allow guest OS administrators to cause a denial of service (host crash) via unspecified vectors related to domain teardown.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8339/">CVE-2015-8339</cve>
	<bugzilla href="https://bugzilla.suse.com/956408">SUSE bug 956408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8340</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8340" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8340" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8340" ref_url="https://www.suse.com/security/cve/CVE-2015-8340" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
    <description>
    The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host crash) via unspecified vectors, related to XENMEM_exchange error handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8340/">CVE-2015-8340</cve>
	<bugzilla href="https://bugzilla.suse.com/956408">SUSE bug 956408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158341" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8341</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8341" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8341" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8341" ref_url="https://www.suse.com/security/cve/CVE-2015-8341" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
    <description>
    The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8341/">CVE-2015-8341</cve>
	<bugzilla href="https://bugzilla.suse.com/956409">SUSE bug 956409</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8345</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8345" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8345" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8345" ref_url="https://www.suse.com/security/cve/CVE-2015-8345" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001743.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2326-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001778.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash and infinite loop) via vectors involving the command block list.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8345/">CVE-2015-8345</cve>
	<bugzilla href="https://bugzilla.suse.com/956829">SUSE bug 956829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/956832">SUSE bug 956832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8363</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8363" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8363" ref_url="https://www.suse.com/security/cve/CVE-2015-8363" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2370-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00118.html" source="SUSE-SU"/>
    <description>
    The jpeg2000_read_main_headers function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service (out-of-bounds heap-memory access) or possibly have unspecified other impact via a crafted image with two or more of these markers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8363/">CVE-2015-8363</cve>
	<bugzilla href="https://bugzilla.suse.com/957114">SUSE bug 957114</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8364</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8364" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8364" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8364" ref_url="https://www.suse.com/security/cve/CVE-2015-8364" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2370-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00118.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service (out-of-bounds heap-memory access) or possibly have unspecified other impact via crafted image dimensions in Indeo Video Interactive data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8364/">CVE-2015-8364</cve>
	<bugzilla href="https://bugzilla.suse.com/957115">SUSE bug 957115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8365</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8365" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8365" ref_url="https://www.suse.com/security/cve/CVE-2015-8365" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2015:2370-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00118.html" source="SUSE-SU"/>
    <description>
    The smka_decode_frame function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is consistent with the number of channels, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Smacker data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8365/">CVE-2015-8365</cve>
	<bugzilla href="https://bugzilla.suse.com/957116">SUSE bug 957116</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8367</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8367" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8367" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8367" ref_url="https://www.suse.com/security/cve/CVE-2015-8367" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003170.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2256-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2729-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00011.html" source="SUSE-SU"/>
    <description>
    The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8367/">CVE-2015-8367</cve>
	<bugzilla href="https://bugzilla.suse.com/1006704">SUSE bug 1006704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1006717">SUSE bug 1006717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957517">SUSE bug 957517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489076" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489077" comment="libraw16-0.18.9-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8370</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8370" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8370" ref_url="https://www.suse.com/security/cve/CVE-2015-8370" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2385-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an "Off-by-two" or "Out of bounds overwrite" memory error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8370/">CVE-2015-8370</cve>
	<bugzilla href="https://bugzilla.suse.com/956631">SUSE bug 956631</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488342" comment="grub2-x86_64-xen-2.02-24.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481179" comment="grub2-2.02-24.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481180" comment="grub2-i386-pc-2.02-24.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481181" comment="grub2-powerpc-ieee1275-2.02-24.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481182" comment="grub2-s390x-emu-2.02-24.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481183" comment="grub2-snapper-plugin-2.02-24.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481184" comment="grub2-systemd-sleep-plugin-2.02-24.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481185" comment="grub2-x86_64-efi-2.02-24.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8374</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8374" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8374" ref_url="https://www.suse.com/security/cve/CVE-2015-8374" source="SUSE CVE"/>
    <description>
    fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-13"/>
	<updated date="2023-05-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8374/">CVE-2015-8374</cve>
	<bugzilla href="https://bugzilla.suse.com/923755">SUSE bug 923755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/956053">SUSE bug 956053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963994">SUSE bug 963994</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8380</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8380" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8380" ref_url="https://www.suse.com/security/cve/CVE-2015-8380" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2805-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00076.html" source="SUSE-SU"/>
    <description>
    The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-19"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8380/">CVE-2015-8380</cve>
	<bugzilla href="https://bugzilla.suse.com/957566">SUSE bug 957566</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335823" comment="libpcre1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335826" comment="libpcre1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335824" comment="libpcre16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335825" comment="libpcrecpp0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335827" comment="libpcrecpp0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335828" comment="libpcreposix0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335829" comment="pcre-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335831" comment="pcre-tools is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8461</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8461" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8461" ref_url="https://www.suse.com/security/cve/CVE-2015-8461" source="SUSE CVE"/>
    <description>
    Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8461/">CVE-2015-8461</cve>
	<bugzilla href="https://bugzilla.suse.com/958861">SUSE bug 958861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958862">SUSE bug 958862</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8467</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8467" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8467" ref_url="https://www.suse.com/security/cve/CVE-2015-8467" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2354-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
    <description>
    The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative privileges during creation of machine accounts, which allows remote authenticated users to bypass intended access restrictions by leveraging the existence of a domain with both a Samba DC and a Windows DC, a similar issue to CVE-2015-2535.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8467/">CVE-2015-8467</cve>
	<bugzilla href="https://bugzilla.suse.com/958585">SUSE bug 958585</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8472</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8472" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8472" ref_url="https://www.suse.com/security/cve/CVE-2015-8472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8472/">CVE-2015-8472</cve>
	<bugzilla href="https://bugzilla.suse.com/954980">SUSE bug 954980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958198">SUSE bug 958198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960402">SUSE bug 960402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8504</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8504" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8504" ref_url="https://www.suse.com/security/cve/CVE-2015-8504" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8504/">CVE-2015-8504</cve>
	<bugzilla href="https://bugzilla.suse.com/958491">SUSE bug 958491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958493">SUSE bug 958493</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8539</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8539" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8539" ref_url="https://www.suse.com/security/cve/CVE-2015-8539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0335-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0337-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0380-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0585-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8539/">CVE-2015-8539</cve>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/781018">SUSE bug 781018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958463">SUSE bug 958463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958601">SUSE bug 958601</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8540</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8540" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8540" ref_url="https://www.suse.com/security/cve/CVE-2015-8540" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002778.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002787.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2672-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0942-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1037-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00063.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8540/">CVE-2015-8540</cve>
	<bugzilla href="https://bugzilla.suse.com/1149680">SUSE bug 1149680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958791">SUSE bug 958791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8543</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8543" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8543" ref_url="https://www.suse.com/security/cve/CVE-2015-8543" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0585-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8543/">CVE-2015-8543</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052256">SUSE bug 1052256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/923755">SUSE bug 923755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/958886">SUSE bug 958886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963994">SUSE bug 963994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969522">SUSE bug 969522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158550" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8550</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8550" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8550" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8550" ref_url="https://www.suse.com/security/cve/CVE-2015-8550" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0585-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
    <description>
    Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8550/">CVE-2015-8550</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052256">SUSE bug 1052256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957988">SUSE bug 957988</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8551</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8551" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8551" ref_url="https://www.suse.com/security/cve/CVE-2015-8551" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0585-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html" source="SUSE-SU"/>
    <description>
    The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka "Linux pciback missing sanity checks."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8551/">CVE-2015-8551</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957990">SUSE bug 957990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8552</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8552" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8552" ref_url="https://www.suse.com/security/cve/CVE-2015-8552" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0168-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html" source="SUSE-SU"/>
    <description>
    The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8552/">CVE-2015-8552</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957990">SUSE bug 957990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8553</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8553" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8553" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8553" ref_url="https://www.suse.com/security/cve/CVE-2015-8553" source="SUSE CVE"/>
    <description>
    Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-8553/">CVE-2015-8553</cve>
	<bugzilla href="https://bugzilla.suse.com/903967">SUSE bug 903967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957990">SUSE bug 957990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8554</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8554" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8554" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8554" ref_url="https://www.suse.com/security/cve/CVE-2015-8554" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries, related to a "write path."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8554/">CVE-2015-8554</cve>
	<bugzilla href="https://bugzilla.suse.com/958007">SUSE bug 958007</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8555</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8555" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8555" ref_url="https://www.suse.com/security/cve/CVE-2015-8555" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
    <description>
    Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8555/">CVE-2015-8555</cve>
	<bugzilla href="https://bugzilla.suse.com/958009">SUSE bug 958009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8558</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8558" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8558" ref_url="https://www.suse.com/security/cve/CVE-2015-8558" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8558/">CVE-2015-8558</cve>
	<bugzilla href="https://bugzilla.suse.com/959005">SUSE bug 959005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959006">SUSE bug 959006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976109">SUSE bug 976109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976111">SUSE bug 976111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8560</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8560" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8560" ref_url="https://www.suse.com/security/cve/CVE-2015-8560" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001799.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:2367-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-12/msg00115.html" source="SUSE-SU"/>
    <description>
    Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8560/">CVE-2015-8560</cve>
	<bugzilla href="https://bugzilla.suse.com/1027197">SUSE bug 1027197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957531">SUSE bug 957531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8567</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8567" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8567" ref_url="https://www.suse.com/security/cve/CVE-2015-8567" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8567/">CVE-2015-8567</cve>
	<bugzilla href="https://bugzilla.suse.com/959386">SUSE bug 959386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959387">SUSE bug 959387</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8568</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8568" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8568" ref_url="https://www.suse.com/security/cve/CVE-2015-8568" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxnet3 device repeatedly.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8568/">CVE-2015-8568</cve>
	<bugzilla href="https://bugzilla.suse.com/959386">SUSE bug 959386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959387">SUSE bug 959387</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8605</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8605" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8605" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8605" ref_url="https://www.suse.com/security/cve/CVE-2015-8605" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001886.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001889.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001890.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0601-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00162.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0610-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00168.html" source="SUSE-SU"/>
    <description>
    ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8605/">CVE-2015-8605</cve>
	<bugzilla href="https://bugzilla.suse.com/961305">SUSE bug 961305</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8607</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8607" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8607" ref_url="https://www.suse.com/security/cve/CVE-2015-8607" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0881-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00112.html" source="SUSE-SU"/>
    <description>
    The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2015-8607/">CVE-2015-8607</cve>
	<bugzilla href="https://bugzilla.suse.com/961528">SUSE bug 961528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336058" comment="perl-doc is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334114" comment="perl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336057" comment="perl-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337401" comment="perl-base-32bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8613</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8613" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8613" ref_url="https://www.suse.com/security/cve/CVE-2015-8613" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8613/">CVE-2015-8613</cve>
	<bugzilla href="https://bugzilla.suse.com/961358">SUSE bug 961358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961556">SUSE bug 961556</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8615</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8615" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8615" ref_url="https://www.suse.com/security/cve/CVE-2015-8615" source="SUSE CVE"/>
    <description>
    The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to cause a denial of service via a large number of changes to the callback method (HVM_PARAM_CALLBACK_IRQ).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8615/">CVE-2015-8615</cve>
	<bugzilla href="https://bugzilla.suse.com/960093">SUSE bug 960093</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8619</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8619" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8619" ref_url="https://www.suse.com/security/cve/CVE-2015-8619" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8619/">CVE-2015-8619</cve>
	<bugzilla href="https://bugzilla.suse.com/960334">SUSE bug 960334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965269">SUSE bug 965269</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8629</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8629" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8629" ref_url="https://www.suse.com/security/cve/CVE-2015-8629" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001871.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0406-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html" source="SUSE-SU"/>
    <description>
    The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authenticated users to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-8629/">CVE-2015-8629</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963968">SUSE bug 963968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8630</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8630" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8630" ref_url="https://www.suse.com/security/cve/CVE-2015-8630" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001870.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0406-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html" source="SUSE-SU"/>
    <description>
    The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8630/">CVE-2015-8630</cve>
	<bugzilla href="https://bugzilla.suse.com/963964">SUSE bug 963964</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8631</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8631" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8631" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8631" ref_url="https://www.suse.com/security/cve/CVE-2015-8631" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001870.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001871.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0406-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via a request specifying a NULL principal name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8631/">CVE-2015-8631</cve>
	<bugzilla href="https://bugzilla.suse.com/963975">SUSE bug 963975</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8660</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8660" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8660" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8660" ref_url="https://www.suse.com/security/cve/CVE-2015-8660" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0585-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0751-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html" source="SUSE-SU"/>
    <description>
    The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-06-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8660/">CVE-2015-8660</cve>
	<bugzilla href="https://bugzilla.suse.com/923755">SUSE bug 923755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960281">SUSE bug 960281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960329">SUSE bug 960329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963994">SUSE bug 963994</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8661</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8661" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8661" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8661" ref_url="https://www.suse.com/security/cve/CVE-2015-8661" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html" source="SUSE-SU"/>
    <description>
    The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted H.264 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8661/">CVE-2015-8661</cve>
	<bugzilla href="https://bugzilla.suse.com/960385">SUSE bug 960385</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8662</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8662" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8662" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8662" ref_url="https://www.suse.com/security/cve/CVE-2015-8662" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html" source="SUSE-SU"/>
    <description>
    The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8662/">CVE-2015-8662</cve>
	<bugzilla href="https://bugzilla.suse.com/960384">SUSE bug 960384</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8663</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8663" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8663" ref_url="https://www.suse.com/security/cve/CVE-2015-8663" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html" source="SUSE-SU"/>
    <description>
    The ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and height values after a failure, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .mov file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8663/">CVE-2015-8663</cve>
	<bugzilla href="https://bugzilla.suse.com/960383">SUSE bug 960383</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8665</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8665" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8665" ref_url="https://www.suse.com/security/cve/CVE-2015-8665" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:14888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010250.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
    <description>
    tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-8665/">CVE-2015-8665</cve>
	<bugzilla href="https://bugzilla.suse.com/1156749">SUSE bug 1156749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156754">SUSE bug 1156754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200195">SUSE bug 1200195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8668</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8668" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8668" ref_url="https://www.suse.com/security/cve/CVE-2015-8668" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004543.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-26"/>
	<updated date="2023-07-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8668/">CVE-2015-8668</cve>
	<bugzilla href="https://bugzilla.suse.com/1014461">SUSE bug 1014461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960589">SUSE bug 960589</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335906" comment="libtiff-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335904" comment="libtiff5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335905" comment="libtiff5-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8683</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8683" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8683" ref_url="https://www.suse.com/security/cve/CVE-2015-8683" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:14888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010250.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
    <description>
    The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-8683/">CVE-2015-8683</cve>
	<bugzilla href="https://bugzilla.suse.com/1156749">SUSE bug 1156749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156754">SUSE bug 1156754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200195">SUSE bug 1200195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8704</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8704" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8704" ref_url="https://www.suse.com/security/cve/CVE-2015-8704" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0227-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0197-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0199-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00025.html" source="SUSE-SU"/>
    <description>
    apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8704/">CVE-2015-8704</cve>
	<bugzilla href="https://bugzilla.suse.com/962189">SUSE bug 962189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962190">SUSE bug 962190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8705</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8705" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8705" ref_url="https://www.suse.com/security/cve/CVE-2015-8705" source="SUSE CVE"/>
    <description>
    buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via (1) OPT data or (2) an ECS option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8705/">CVE-2015-8705</cve>
	<bugzilla href="https://bugzilla.suse.com/962189">SUSE bug 962189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962190">SUSE bug 962190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8711</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8711" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8711" ref_url="https://www.suse.com/security/cve/CVE-2015-8711" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8711/">CVE-2015-8711</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8718</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8718" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8718" ref_url="https://www.suse.com/security/cve/CVE-2015-8718" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Match MSG/RES packets for async NLM" option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8718/">CVE-2015-8718</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8720</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8720" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8720" ref_url="https://www.suse.com/security/cve/CVE-2015-8720" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8720/">CVE-2015-8720</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8721</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8721" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8721" ref_url="https://www.suse.com/security/cve/CVE-2015-8721" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet with zlib compression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8721/">CVE-2015-8721</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8722</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8722" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8722" ref_url="https://www.suse.com/security/cve/CVE-2015-8722" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame pointer, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8722/">CVE-2015-8722</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8723</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8723" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8723" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8723" ref_url="https://www.suse.com/security/cve/CVE-2015-8723" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8723/">CVE-2015-8723</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8724</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8724" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8724" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8724" ref_url="https://www.suse.com/security/cve/CVE-2015-8724" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not verify the WPA broadcast key length, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8724/">CVE-2015-8724</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8725</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8725" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8725" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8725" ref_url="https://www.suse.com/security/cve/CVE-2015-8725" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8725/">CVE-2015-8725</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158726" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8726</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8726" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8726" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8726" ref_url="https://www.suse.com/security/cve/CVE-2015-8726" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme (MCS) data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8726/">CVE-2015-8726</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158727" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8727</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8727" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8727" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8727" ref_url="https://www.suse.com/security/cve/CVE-2015-8727" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not properly maintain request-key data, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8727/">CVE-2015-8727</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8728</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8728" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8728" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8728" ref_url="https://www.suse.com/security/cve/CVE-2015-8728" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    The Mobile Identity parser in (1) epan/dissectors/packet-ansi_a.c in the ANSI A dissector and (2) epan/dissectors/packet-gsm_a_common.c in the GSM A dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly uses the tvb_bcd_dig_to_wmem_packet_str function, which allows remote attackers to cause a denial of service (buffer overflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8728/">CVE-2015-8728</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8729</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8729" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8729" ref_url="https://www.suse.com/security/cve/CVE-2015-8729" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure the presence of a '\0' character at the end of a date string, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8729/">CVE-2015-8729</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8730</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8730" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8730" ref_url="https://www.suse.com/security/cve/CVE-2015-8730" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8730/">CVE-2015-8730</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8731</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8731" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8731" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8731" ref_url="https://www.suse.com/security/cve/CVE-2015-8731" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not reject unknown TLV types, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8731/">CVE-2015-8731</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8732</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8732" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8732" ref_url="https://www.suse.com/security/cve/CVE-2015-8732" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the Total Profile Number field, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8732/">CVE-2015-8732</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8733</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8733" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8733" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8733" ref_url="https://www.suse.com/security/cve/CVE-2015-8733" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001798.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0054-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00011.html" source="SUSE-SU"/>
    <description>
    The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8733/">CVE-2015-8733</cve>
	<bugzilla href="https://bugzilla.suse.com/960382">SUSE bug 960382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8734</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8734" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8734" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8734" ref_url="https://www.suse.com/security/cve/CVE-2015-8734" source="SUSE CVE"/>
    <description>
    The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8734/">CVE-2015-8734</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8735</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8735" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8735" ref_url="https://www.suse.com/security/cve/CVE-2015-8735" source="SUSE CVE"/>
    <description>
    The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (invalid write operation and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8735/">CVE-2015-8735</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8736</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8736" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8736" ref_url="https://www.suse.com/security/cve/CVE-2015-8736" source="SUSE CVE"/>
    <description>
    The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8736/">CVE-2015-8736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8737</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8737" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8737" ref_url="https://www.suse.com/security/cve/CVE-2015-8737" source="SUSE CVE"/>
    <description>
    The mp2t_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8737/">CVE-2015-8737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8738</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8738" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8738" ref_url="https://www.suse.com/security/cve/CVE-2015-8738" source="SUSE CVE"/>
    <description>
    The s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8738/">CVE-2015-8738</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8739</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8739" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8739" ref_url="https://www.suse.com/security/cve/CVE-2015-8739" source="SUSE CVE"/>
    <description>
    The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a packet scope, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8739/">CVE-2015-8739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8740</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8740" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8740" ref_url="https://www.suse.com/security/cve/CVE-2015-8740" source="SUSE CVE"/>
    <description>
    The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8740/">CVE-2015-8740</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8741</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8741" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8741" ref_url="https://www.suse.com/security/cve/CVE-2015-8741" source="SUSE CVE"/>
    <description>
    The dissect_ppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8741/">CVE-2015-8741</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8742</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8742" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8742" ref_url="https://www.suse.com/security/cve/CVE-2015-8742" source="SUSE CVE"/>
    <description>
    The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8742/">CVE-2015-8742</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8743</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8743" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8743" ref_url="https://www.suse.com/security/cve/CVE-2015-8743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-8743/">CVE-2015-8743</cve>
	<bugzilla href="https://bugzilla.suse.com/960725">SUSE bug 960725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960726">SUSE bug 960726</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8744</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8744" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8744" ref_url="https://www.suse.com/security/cve/CVE-2015-8744" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8744/">CVE-2015-8744</cve>
	<bugzilla href="https://bugzilla.suse.com/960835">SUSE bug 960835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960836">SUSE bug 960836</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8745</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8745" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8745" ref_url="https://www.suse.com/security/cve/CVE-2015-8745" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8745/">CVE-2015-8745</cve>
	<bugzilla href="https://bugzilla.suse.com/960707">SUSE bug 960707</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960708">SUSE bug 960708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333988" comment="qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335414" comment="qemu-arm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336533" comment="qemu-audio-alsa is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336534" comment="qemu-audio-oss is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336535" comment="qemu-audio-pa is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335210" comment="qemu-block-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335211" comment="qemu-block-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335248" comment="qemu-block-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335212" comment="qemu-block-ssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335213" comment="qemu-guest-agent is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335214" comment="qemu-ipxe is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335243" comment="qemu-kvm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335215" comment="qemu-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335244" comment="qemu-seabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335245" comment="qemu-sgabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335217" comment="qemu-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336537" comment="qemu-ui-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336538" comment="qemu-ui-gtk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335218" comment="qemu-vgabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335246" comment="qemu-x86 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8763</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8763" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8763" ref_url="https://www.suse.com/security/cve/CVE-2015-8763" source="SUSE CVE"/>
    <description>
    The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8763/">CVE-2015-8763</cve>
	<bugzilla href="https://bugzilla.suse.com/961479">SUSE bug 961479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488329" comment="freeradius-server-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488330" comment="freeradius-server-devel-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488331" comment="freeradius-server-krb5-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488332" comment="freeradius-server-ldap-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488333" comment="freeradius-server-libs-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488334" comment="freeradius-server-mysql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488335" comment="freeradius-server-perl-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488336" comment="freeradius-server-postgresql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488337" comment="freeradius-server-python-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488338" comment="freeradius-server-sqlite-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488339" comment="freeradius-server-utils-3.0.16-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8776</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8776" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8776" ref_url="https://www.suse.com/security/cve/CVE-2015-8776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID7017287" ref_url="https://www.suse.com/support/kb/doc?id=7017287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html" source="SUSE-SU"/>
    <description>
    The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range time value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8776/">CVE-2015-8776</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962736">SUSE bug 962736</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986086">SUSE bug 986086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8777</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8777" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8777" ref_url="https://www.suse.com/security/cve/CVE-2015-8777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID7017287" ref_url="https://www.suse.com/support/kb/doc?id=7017287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html" source="SUSE-SU"/>
    <description>
    The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8777/">CVE-2015-8777</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/950944">SUSE bug 950944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962735">SUSE bug 962735</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8778</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8778" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8778" ref_url="https://www.suse.com/security/cve/CVE-2015-8778" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID7017287" ref_url="https://www.suse.com/support/kb/doc?id=7017287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8778/">CVE-2015-8778</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962737">SUSE bug 962737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986086">SUSE bug 986086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8779</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8779" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8779" ref_url="https://www.suse.com/security/cve/CVE-2015-8779" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID7017287" ref_url="https://www.suse.com/support/kb/doc?id=7017287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8779/">CVE-2015-8779</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962739">SUSE bug 962739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965453">SUSE bug 965453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986086">SUSE bug 986086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8781</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8781" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8781" ref_url="https://www.suse.com/security/cve/CVE-2015-8781" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0414-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
    <description>
    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8781/">CVE-2015-8781</cve>
	<bugzilla href="https://bugzilla.suse.com/964213">SUSE bug 964213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964225">SUSE bug 964225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8782</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8782" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8782" ref_url="https://www.suse.com/security/cve/CVE-2015-8782" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0414-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
    <description>
    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8782/">CVE-2015-8782</cve>
	<bugzilla href="https://bugzilla.suse.com/964213">SUSE bug 964213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964225">SUSE bug 964225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8783</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8783" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8783" ref_url="https://www.suse.com/security/cve/CVE-2015-8783" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001854.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0414-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
    <description>
    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8783/">CVE-2015-8783</cve>
	<bugzilla href="https://bugzilla.suse.com/964213">SUSE bug 964213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964225">SUSE bug 964225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158785" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8785</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8785" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8785" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8785" ref_url="https://www.suse.com/security/cve/CVE-2015-8785" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0585-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero length for the first segment of an iov.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8785/">CVE-2015-8785</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963765">SUSE bug 963765</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8803</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8803" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8803" ref_url="https://www.suse.com/security/cve/CVE-2015-8803" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001877.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0475-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0477-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0486-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00100.html" source="SUSE-SU"/>
    <description>
    The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8803/">CVE-2015-8803</cve>
	<bugzilla href="https://bugzilla.suse.com/964845">SUSE bug 964845</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481375" comment="libhogweed4-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481376" comment="libhogweed4-32bit-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481377" comment="libnettle-devel-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481378" comment="libnettle6-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481379" comment="libnettle6-32bit-3.4.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8804</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8804" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8804" ref_url="https://www.suse.com/security/cve/CVE-2015-8804" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001877.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0475-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0477-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0486-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00100.html" source="SUSE-SU"/>
    <description>
    x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8804/">CVE-2015-8804</cve>
	<bugzilla href="https://bugzilla.suse.com/964847">SUSE bug 964847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481375" comment="libhogweed4-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481376" comment="libhogweed4-32bit-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481377" comment="libnettle-devel-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481378" comment="libnettle6-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481379" comment="libnettle6-32bit-3.4.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8805</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8805" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8805" ref_url="https://www.suse.com/security/cve/CVE-2015-8805" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001877.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0475-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0477-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0486-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00100.html" source="SUSE-SU"/>
    <description>
    The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8805/">CVE-2015-8805</cve>
	<bugzilla href="https://bugzilla.suse.com/964849">SUSE bug 964849</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481375" comment="libhogweed4-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481376" comment="libhogweed4-32bit-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481377" comment="libnettle-devel-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481378" comment="libnettle6-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481379" comment="libnettle6-32bit-3.4.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8816</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8816" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8816" ref_url="https://www.suse.com/security/cve/CVE-2015-8816" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2001-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2006-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2009-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8816/">CVE-2015-8816</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968010">SUSE bug 968010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979064">SUSE bug 979064</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8830</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8830" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8830" ref_url="https://www.suse.com/security/cve/CVE-2015-8830" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.  NOTE: this vulnerability exists because of a CVE-2012-6701 regression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8830/">CVE-2015-8830</cve>
	<bugzilla href="https://bugzilla.suse.com/969354">SUSE bug 969354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969355">SUSE bug 969355</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8833</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8833" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8833" ref_url="https://www.suse.com/security/cve/CVE-2015-8833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0878-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00109.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8833/">CVE-2015-8833</cve>
	<bugzilla href="https://bugzilla.suse.com/970498">SUSE bug 970498</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489042" comment="pidgin-plugin-otr-4.0.2-1.61 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489043" comment="pidgin-plugin-otr-lang-4.0.2-1.61 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8839</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8839" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8839" ref_url="https://www.suse.com/security/cve/CVE-2015-8839" source="SUSE CVE"/>
    <description>
    Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole punching and page-fault handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8839/">CVE-2015-8839</cve>
	<bugzilla href="https://bugzilla.suse.com/972174">SUSE bug 972174</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8844</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8844" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8844" ref_url="https://www.suse.com/security/cve/CVE-2015-8844" source="SUSE CVE"/>
    <description>
    The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the S and T bits set, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8844/">CVE-2015-8844</cve>
	<bugzilla href="https://bugzilla.suse.com/975531">SUSE bug 975531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975533">SUSE bug 975533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8845</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8845" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8845" ref_url="https://www.suse.com/security/cve/CVE-2015-8845" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html" source="SUSE-SU"/>
    <description>
    The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with a tm_reclaim call, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8845/">CVE-2015-8845</cve>
	<bugzilla href="https://bugzilla.suse.com/975531">SUSE bug 975531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975533">SUSE bug 975533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8863</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8863" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8863" ref_url="https://www.suse.com/security/cve/CVE-2015-8863" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1214-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00014.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8863/">CVE-2015-8863</cve>
	<bugzilla href="https://bugzilla.suse.com/1014176">SUSE bug 1014176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976992">SUSE bug 976992</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481193" comment="jq-1.5-1.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481194" comment="libjq-devel-1.5-1.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481195" comment="libjq1-1.5-1.27 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158869" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8869</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8869" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8869" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8869" ref_url="https://www.suse.com/security/cve/CVE-2015-8869" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002243.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002244.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1335-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00037.html" source="SUSE-SU"/>
    <description>
    OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8869/">CVE-2015-8869</cve>
	<bugzilla href="https://bugzilla.suse.com/977990">SUSE bug 977990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487686" comment="ocaml-4.05.0-4.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487687" comment="ocaml-compiler-libs-4.05.0-4.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487688" comment="ocaml-compiler-libs-devel-4.05.0-4.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487775" comment="ocaml-ocamldoc-4.05.0-4.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487689" comment="ocaml-rpm-macros-4.05.0-4.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487690" comment="ocaml-runtime-4.05.0-4.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8899</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8899" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8899" ref_url="https://www.suse.com/security/cve/CVE-2015-8899" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3199-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0016-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00004.html" source="SUSE-SU"/>
    <description>
    Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8899/">CVE-2015-8899</cve>
	<bugzilla href="https://bugzilla.suse.com/983273">SUSE bug 983273</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481098" comment="dnsmasq-2.78-5.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8900</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8900" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8900" ref_url="https://www.suse.com/security/cve/CVE-2015-8900" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1784-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8900/">CVE-2015-8900</cve>
	<bugzilla href="https://bugzilla.suse.com/983232">SUSE bug 983232</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158917" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8917</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8917" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8917" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8917" ref_url="https://www.suse.com/security/cve/CVE-2015-8917" source="SUSE CVE"/>
    <description>
    bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8917/">CVE-2015-8917</cve>
	<bugzilla href="https://bugzilla.suse.com/985691">SUSE bug 985691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8928</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8928" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8928" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8928" ref_url="https://www.suse.com/security/cve/CVE-2015-8928" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8928/">CVE-2015-8928</cve>
	<bugzilla href="https://bugzilla.suse.com/985679">SUSE bug 985679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8933</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8933" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8933" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8933" ref_url="https://www.suse.com/security/cve/CVE-2015-8933" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8933/">CVE-2015-8933</cve>
	<bugzilla href="https://bugzilla.suse.com/985688">SUSE bug 985688</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8934</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8934" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8934" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8934" ref_url="https://www.suse.com/security/cve/CVE-2015-8934" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8934/">CVE-2015-8934</cve>
	<bugzilla href="https://bugzilla.suse.com/985673">SUSE bug 985673</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8948</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8948" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8948" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8948" ref_url="https://www.suse.com/security/cve/CVE-2015-8948" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html" source="SUSE-SU"/>
    <description>
    idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-8948/">CVE-2015-8948</cve>
	<bugzilla href="https://bugzilla.suse.com/1014473">SUSE bug 1014473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173590">SUSE bug 1173590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190777">SUSE bug 1190777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990189">SUSE bug 990189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480552" comment="libidn-devel-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480553" comment="libidn11-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481380" comment="libidn11-32bit-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480554" comment="libidn2-0-2.0.4-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480555" comment="libidn2-0-32bit-2.0.4-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480556" comment="libidn2-devel-2.0.4-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8950</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8950" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8950" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8950" ref_url="https://www.suse.com/security/cve/CVE-2015-8950" source="SUSE CVE"/>
    <description>
    arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dma_mmap call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8950/">CVE-2015-8950</cve>
	<bugzilla href="https://bugzilla.suse.com/1003931">SUSE bug 1003931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004045">SUSE bug 1004045</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8952</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8952" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8952" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8952" ref_url="https://www.suse.com/security/cve/CVE-2015-8952" source="SUSE CVE"/>
    <description>
    The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-8952/">CVE-2015-8952</cve>
	<bugzilla href="https://bugzilla.suse.com/995759">SUSE bug 995759</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8953</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8953" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8953" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8953" ref_url="https://www.suse.com/security/cve/CVE-2015-8953" source="SUSE CVE"/>
    <description>
    fs/overlayfs/copy_up.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of service (dentry reference leak) via filesystem operations on a large file in a lower overlayfs layer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8953/">CVE-2015-8953</cve>
	<bugzilla href="https://bugzilla.suse.com/995763">SUSE bug 995763</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8962</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8962" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8962" ref_url="https://www.suse.com/security/cve/CVE-2015-8962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8962/">CVE-2015-8962</cve>
	<bugzilla href="https://bugzilla.suse.com/1010501">SUSE bug 1010501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8963</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8963" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8963" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8963" ref_url="https://www.suse.com/security/cve/CVE-2015-8963" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect handling of an swevent data structure during a CPU unplug operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8963/">CVE-2015-8963</cve>
	<bugzilla href="https://bugzilla.suse.com/1010502">SUSE bug 1010502</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8970</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8970" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8970" ref_url="https://www.suse.com/security/cve/CVE-2015-8970" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2342-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00009.html" source="SUSE-SU"/>
    <description>
    crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted application that does not supply a key, related to the lrw_crypt function in crypto/lrw.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8970/">CVE-2015-8970</cve>
	<bugzilla href="https://bugzilla.suse.com/1008374">SUSE bug 1008374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008850">SUSE bug 1008850</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8982</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8982" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8982" ref_url="https://www.suse.com/security/cve/CVE-2015-8982" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:14923-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010489.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8982/">CVE-2015-8982</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193616">SUSE bug 1193616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199869">SUSE bug 1199869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200203">SUSE bug 1200203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920169">SUSE bug 920169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920338">SUSE bug 920338</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334826" comment="glibc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334837" comment="glibc-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339498" comment="glibc-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334827" comment="glibc-i18ndata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334831" comment="glibc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334828" comment="glibc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339499" comment="glibc-locale-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334832" comment="glibc-profile is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334829" comment="nscd is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334833" comment="glibc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334826" comment="glibc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334834" comment="glibc-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334837" comment="glibc-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339498" comment="glibc-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334827" comment="glibc-i18ndata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334831" comment="glibc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334828" comment="glibc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334835" comment="glibc-locale-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339499" comment="glibc-locale-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334832" comment="glibc-profile is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334829" comment="nscd is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8983</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8983" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8983" ref_url="https://www.suse.com/security/cve/CVE-2015-8983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:14923-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010489.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to computing a size in bytes, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2015-8983/">CVE-2015-8983</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193615">SUSE bug 1193615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199869">SUSE bug 1199869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920169">SUSE bug 920169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920338">SUSE bug 920338</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334826" comment="glibc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334837" comment="glibc-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339498" comment="glibc-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334827" comment="glibc-i18ndata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334831" comment="glibc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334828" comment="glibc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339499" comment="glibc-locale-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334832" comment="glibc-profile is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334829" comment="nscd is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334833" comment="glibc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334826" comment="glibc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334834" comment="glibc-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334837" comment="glibc-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339498" comment="glibc-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334827" comment="glibc-i18ndata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334831" comment="glibc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334828" comment="glibc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334835" comment="glibc-locale-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339499" comment="glibc-locale-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334832" comment="glibc-profile is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334829" comment="nscd is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8985</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-8985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8985" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-8985" ref_url="https://www.suse.com/security/cve/CVE-2015-8985" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010468.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010471.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012880.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012916.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010512.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010513.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010514.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010632.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010633.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010637.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014663.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010437.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3942-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012879.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3942-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013175.html" source="SUSE-SU"/>
    <description>
    The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8985/">CVE-2015-8985</cve>
	<bugzilla href="https://bugzilla.suse.com/1193625">SUSE bug 1193625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920169">SUSE bug 920169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920338">SUSE bug 920338</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669024" comment="glibc-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669025" comment="glibc-32bit-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669026" comment="glibc-devel-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669027" comment="glibc-devel-32bit-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669028" comment="glibc-devel-static-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669029" comment="glibc-extra-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669030" comment="glibc-i18ndata-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669031" comment="glibc-info-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669032" comment="glibc-locale-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669033" comment="glibc-locale-base-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669034" comment="glibc-locale-base-32bit-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669035" comment="glibc-profile-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669036" comment="glibc-utils-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669037" comment="nscd-2.26-13.65.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669047" comment="glibc-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669025" comment="glibc-32bit-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669048" comment="glibc-devel-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669027" comment="glibc-devel-32bit-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669049" comment="glibc-devel-static-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669050" comment="glibc-extra-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669030" comment="glibc-i18ndata-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669031" comment="glibc-info-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669051" comment="glibc-locale-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669052" comment="glibc-locale-base-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669034" comment="glibc-locale-base-32bit-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669053" comment="glibc-profile-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669054" comment="glibc-utils-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669055" comment="nscd-2.26-13.65.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669056" comment="glibc-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669025" comment="glibc-32bit-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669057" comment="glibc-devel-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669027" comment="glibc-devel-32bit-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669058" comment="glibc-devel-static-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669059" comment="glibc-extra-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669030" comment="glibc-i18ndata-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669031" comment="glibc-info-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669060" comment="glibc-locale-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669061" comment="glibc-locale-base-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669034" comment="glibc-locale-base-32bit-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669062" comment="glibc-profile-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669063" comment="glibc-utils-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669064" comment="nscd-2.26-13.65.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669074" comment="glibc-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669025" comment="glibc-32bit-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669075" comment="glibc-devel-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669027" comment="glibc-devel-32bit-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669076" comment="glibc-devel-static-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669077" comment="glibc-extra-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669030" comment="glibc-i18ndata-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669031" comment="glibc-info-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669078" comment="glibc-locale-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669079" comment="glibc-locale-base-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669034" comment="glibc-locale-base-32bit-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669080" comment="glibc-profile-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669081" comment="glibc-utils-2.26-13.65.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669082" comment="nscd-2.26-13.65.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9019</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9019" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9019" ref_url="https://www.suse.com/security/cve/CVE-2015-9019" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1390-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00079.html" source="SUSE-SU"/>
    <description>
    In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-9019/">CVE-2015-9019</cve>
	<bugzilla href="https://bugzilla.suse.com/1123130">SUSE bug 1123130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/934119">SUSE bug 934119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480825" comment="libxslt-devel-1.1.32-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480826" comment="libxslt-tools-1.1.32-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480827" comment="libxslt1-1.1.32-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9096</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9096" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9096" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9096" ref_url="https://www.suse.com/security/cve/CVE-2015-9096" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
    <description>
    Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-9096/">CVE-2015-9096</cve>
	<bugzilla href="https://bugzilla.suse.com/1043983">SUSE bug 1043983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9251</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9251" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9251" ref_url="https://www.suse.com/security/cve/CVE-2015-9251" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006630.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html" source="SUSE-SU"/>
    <description>
    jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-9251/">CVE-2015-9251</cve>
	<bugzilla href="https://bugzilla.suse.com/1099458">SUSE bug 1099458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1100133">SUSE bug 1100133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111660">SUSE bug 1111660</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334078" comment="ruby is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009493051" comment="libruby2_5-2_5-2.5.7-4.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009493052" comment="ruby2.5-2.5.7-4.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009493053" comment="ruby2.5-devel-2.5.7-4.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009493054" comment="ruby2.5-devel-extra-2.5.7-4.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009493055" comment="ruby2.5-stdlib-2.5.7-4.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9252</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9252" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9252" ref_url="https://www.suse.com/security/cve/CVE-2015-9252" source="SUSE CVE"/>
    <description>
    An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9252/">CVE-2015-9252</cve>
	<bugzilla href="https://bugzilla.suse.com/1080931">SUSE bug 1080931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009726870" comment="libqpdf21 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339025" comment="qpdf is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655180" comment="qpdf-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9253</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9253" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9253" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9253" ref_url="https://www.suse.com/security/cve/CVE-2015-9253" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010332.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0679-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O33XW3SB7IZV5RQWCSZCBFQE4OBWACOB/" source="SUSE-SU"/>
    <description>
    An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions (e.g., passthru, exec, shell_exec, or system) with a non-blocking STDIN stream, causing this master process to consume 100% of the CPU, and consume disk space with a large volume of error logs, as demonstrated by an attack by a customer of a shared-hosting facility.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9253/">CVE-2015-9253</cve>
	<bugzilla href="https://bugzilla.suse.com/1081790">SUSE bug 1081790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009723738" comment="apache2-mod_php7-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723739" comment="php7-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723740" comment="php7-bcmath-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723741" comment="php7-bz2-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723742" comment="php7-calendar-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723743" comment="php7-ctype-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723744" comment="php7-curl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723745" comment="php7-dba-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723746" comment="php7-devel-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723747" comment="php7-dom-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723748" comment="php7-enchant-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723749" comment="php7-exif-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723750" comment="php7-fastcgi-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723751" comment="php7-fileinfo-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723752" comment="php7-fpm-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723753" comment="php7-ftp-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723754" comment="php7-gd-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723755" comment="php7-gettext-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723756" comment="php7-gmp-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723757" comment="php7-iconv-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723758" comment="php7-intl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723759" comment="php7-json-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723760" comment="php7-ldap-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723761" comment="php7-mbstring-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723762" comment="php7-mysql-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723763" comment="php7-odbc-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723764" comment="php7-opcache-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723765" comment="php7-openssl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723766" comment="php7-pcntl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723767" comment="php7-pdo-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723768" comment="php7-pear-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723769" comment="php7-pear-Archive_Tar-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723770" comment="php7-pgsql-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723771" comment="php7-phar-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723772" comment="php7-posix-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723773" comment="php7-readline-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723774" comment="php7-shmop-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723775" comment="php7-snmp-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723776" comment="php7-soap-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723777" comment="php7-sockets-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723778" comment="php7-sodium-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723779" comment="php7-sqlite-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723780" comment="php7-sysvmsg-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723781" comment="php7-sysvsem-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723782" comment="php7-sysvshm-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723791" comment="php7-tidy-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723783" comment="php7-tokenizer-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723784" comment="php7-wddx-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723785" comment="php7-xmlreader-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723786" comment="php7-xmlrpc-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723787" comment="php7-xmlwriter-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723788" comment="php7-xsl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723789" comment="php7-zip-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723790" comment="php7-zlib-7.2.34-150000.4.103.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009723843" comment="apache2-mod_php7-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723844" comment="php7-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723845" comment="php7-bcmath-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723846" comment="php7-bz2-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723847" comment="php7-calendar-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723848" comment="php7-ctype-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723849" comment="php7-curl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723850" comment="php7-dba-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723851" comment="php7-devel-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723852" comment="php7-dom-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723853" comment="php7-enchant-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723854" comment="php7-exif-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723855" comment="php7-fastcgi-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723856" comment="php7-fileinfo-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723857" comment="php7-fpm-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723858" comment="php7-ftp-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723859" comment="php7-gd-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723860" comment="php7-gettext-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723861" comment="php7-gmp-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723862" comment="php7-iconv-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723863" comment="php7-intl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723864" comment="php7-json-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723865" comment="php7-ldap-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723866" comment="php7-mbstring-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723867" comment="php7-mysql-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723868" comment="php7-odbc-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723869" comment="php7-opcache-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723870" comment="php7-openssl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723871" comment="php7-pcntl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723872" comment="php7-pdo-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723768" comment="php7-pear-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723769" comment="php7-pear-Archive_Tar-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723873" comment="php7-pgsql-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723874" comment="php7-phar-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723875" comment="php7-posix-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723876" comment="php7-readline-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723877" comment="php7-shmop-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723878" comment="php7-snmp-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723879" comment="php7-soap-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723880" comment="php7-sockets-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723881" comment="php7-sodium-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723882" comment="php7-sqlite-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723883" comment="php7-sysvmsg-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723884" comment="php7-sysvsem-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723885" comment="php7-sysvshm-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009725928" comment="php7-tidy-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723886" comment="php7-tokenizer-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723639" comment="php7-wddx-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723887" comment="php7-xmlreader-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723888" comment="php7-xmlrpc-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723889" comment="php7-xmlwriter-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723890" comment="php7-xsl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723891" comment="php7-zip-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723892" comment="php7-zlib-7.2.34-150000.4.103.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009723893" comment="apache2-mod_php7-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723894" comment="php7-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723895" comment="php7-bcmath-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723896" comment="php7-bz2-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723897" comment="php7-calendar-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723898" comment="php7-ctype-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723899" comment="php7-curl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723900" comment="php7-dba-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723901" comment="php7-devel-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723902" comment="php7-dom-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723903" comment="php7-enchant-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723904" comment="php7-exif-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723905" comment="php7-fastcgi-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723906" comment="php7-fileinfo-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723907" comment="php7-fpm-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723908" comment="php7-ftp-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723909" comment="php7-gd-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723910" comment="php7-gettext-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723911" comment="php7-gmp-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723912" comment="php7-iconv-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723913" comment="php7-intl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723914" comment="php7-json-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723915" comment="php7-ldap-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723916" comment="php7-mbstring-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723917" comment="php7-mysql-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723918" comment="php7-odbc-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723919" comment="php7-opcache-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723920" comment="php7-openssl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723921" comment="php7-pcntl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723922" comment="php7-pdo-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723768" comment="php7-pear-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723769" comment="php7-pear-Archive_Tar-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723923" comment="php7-pgsql-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723924" comment="php7-phar-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723925" comment="php7-posix-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723926" comment="php7-readline-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723927" comment="php7-shmop-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723928" comment="php7-snmp-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723929" comment="php7-soap-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723930" comment="php7-sockets-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723931" comment="php7-sodium-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723932" comment="php7-sqlite-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723933" comment="php7-sysvmsg-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723934" comment="php7-sysvsem-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723935" comment="php7-sysvshm-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723936" comment="php7-tidy-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723937" comment="php7-tokenizer-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723938" comment="php7-wddx-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723939" comment="php7-xmlreader-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723940" comment="php7-xmlrpc-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723941" comment="php7-xmlwriter-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723942" comment="php7-xsl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723943" comment="php7-zip-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723944" comment="php7-zlib-7.2.34-150000.4.103.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009724048" comment="apache2-mod_php7-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724049" comment="php7-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724050" comment="php7-bcmath-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724051" comment="php7-bz2-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724052" comment="php7-calendar-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724053" comment="php7-ctype-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724054" comment="php7-curl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724055" comment="php7-dba-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724056" comment="php7-devel-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724057" comment="php7-dom-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724058" comment="php7-enchant-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724059" comment="php7-exif-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724060" comment="php7-fastcgi-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724061" comment="php7-fileinfo-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724062" comment="php7-fpm-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724063" comment="php7-ftp-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724064" comment="php7-gd-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724065" comment="php7-gettext-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724066" comment="php7-gmp-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724067" comment="php7-iconv-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724068" comment="php7-intl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724069" comment="php7-json-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724070" comment="php7-ldap-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724071" comment="php7-mbstring-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724072" comment="php7-mysql-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724073" comment="php7-odbc-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724074" comment="php7-opcache-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724075" comment="php7-openssl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724076" comment="php7-pcntl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724077" comment="php7-pdo-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723768" comment="php7-pear-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009723769" comment="php7-pear-Archive_Tar-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724078" comment="php7-pgsql-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724079" comment="php7-phar-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724080" comment="php7-posix-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724081" comment="php7-readline-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724082" comment="php7-shmop-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724083" comment="php7-snmp-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724084" comment="php7-soap-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724085" comment="php7-sockets-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724086" comment="php7-sodium-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724087" comment="php7-sqlite-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724088" comment="php7-sysvmsg-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724089" comment="php7-sysvsem-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724090" comment="php7-sysvshm-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724091" comment="php7-tidy-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724092" comment="php7-tokenizer-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724093" comment="php7-wddx-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724094" comment="php7-xmlreader-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724095" comment="php7-xmlrpc-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724096" comment="php7-xmlwriter-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724097" comment="php7-xsl-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724098" comment="php7-zip-7.2.34-150000.4.103.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009724099" comment="php7-zlib-7.2.34-150000.4.103.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9261</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9261" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9261" ref_url="https://www.suse.com/security/cve/CVE-2015-9261" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9261/">CVE-2015-9261</cve>
	<bugzilla href="https://bugzilla.suse.com/1102912">SUSE bug 1102912</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663736" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663741" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663750" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663751" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663766" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663767" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9289</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9289" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9289" ref_url="https://www.suse.com/security/cve/CVE-2015-9289" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14157-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005859.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-9289/">CVE-2015-9289</cve>
	<bugzilla href="https://bugzilla.suse.com/1143179">SUSE bug 1143179</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9290</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9290" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9290" ref_url="https://www.suse.com/security/cve/CVE-2015-9290" source="SUSE CVE"/>
    <description>
    In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new values of cur and limit are sensible before going to Again.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-9290/">CVE-2015-9290</cve>
	<bugzilla href="https://bugzilla.suse.com/1143564">SUSE bug 1143564</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336129" comment="freetype2-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336128" comment="libfreetype6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336127" comment="libfreetype6-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9381</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9381" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9381" ref_url="https://www.suse.com/security/cve/CVE-2015-9381" source="SUSE CVE"/>
    <description>
    FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-9381/">CVE-2015-9381</cve>
	<bugzilla href="https://bugzilla.suse.com/1149384">SUSE bug 1149384</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336129" comment="freetype2-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336128" comment="libfreetype6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336127" comment="libfreetype6-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9382</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9382" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9382" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9382" ref_url="https://www.suse.com/security/cve/CVE-2015-9382" source="SUSE CVE"/>
    <description>
    FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-9382/">CVE-2015-9382</cve>
	<bugzilla href="https://bugzilla.suse.com/1149395">SUSE bug 1149395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336129" comment="freetype2-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336128" comment="libfreetype6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336127" comment="libfreetype6-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9383</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9383" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9383" ref_url="https://www.suse.com/security/cve/CVE-2015-9383" source="SUSE CVE"/>
    <description>
    FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-9383/">CVE-2015-9383</cve>
	<bugzilla href="https://bugzilla.suse.com/1149397">SUSE bug 1149397</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336129" comment="freetype2-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336128" comment="libfreetype6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336127" comment="libfreetype6-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9542</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2015-9542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9542" source="CVE"/>
    <reference ref_id="SUSE CVE-2015-9542" ref_url="https://www.suse.com/security/cve/CVE-2015-9542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:1896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008958.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0870-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3KXPRDBUQG5DRAA3TWBMKHHZP4CR2QEX/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1896-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42BXAKC6WUYJZ65BBT2CMMJRVQFPVQI3/" source="SUSE-SU"/>
    <description>
    add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-10-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9542/">CVE-2015-9542</cve>
	<bugzilla href="https://bugzilla.suse.com/1163933">SUSE bug 1163933</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009499918" comment="pam_radius-1.4.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009503413" comment="pam_radius-1.4.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009505349" comment="pam_radius-1.4.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009507245" comment="pam_radius-1.4.0-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160264" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0264</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0264" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0264" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0264" ref_url="https://www.suse.com/security/cve/CVE-2016-0264" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-0264/">CVE-2016-0264</cve>
	<bugzilla href="https://bugzilla.suse.com/977648">SUSE bug 977648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0363</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0363" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0363" ref_url="https://www.suse.com/security/cve/CVE-2016-0363" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html" source="SUSE-SU"/>
    <description>
    The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) uses the invoke method of the java.lang.reflect.Method class in an AccessController doPrivileged block, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to a Proxy object instance implementing the java.lang.reflect.InvocationHandler interface.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3009.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0363/">CVE-2016-0363</cve>
	<bugzilla href="https://bugzilla.suse.com/977650">SUSE bug 977650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0376</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0376" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0376" ref_url="https://www.suse.com/security/cve/CVE-2016-0376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html" source="SUSE-SU"/>
    <description>
    The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) does not properly deserialize classes in an AccessController doPrivileged block, which allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code as demonstrated by the readValue method of the com.ibm.rmi.io.ValueHandlerPool.ValueHandlerSingleton class, which implements the javax.rmi.CORBA.ValueHandler interface.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-5456.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0376/">CVE-2016-0376</cve>
	<bugzilla href="https://bugzilla.suse.com/977646">SUSE bug 977646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977650">SUSE bug 977650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981057">SUSE bug 981057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981060">SUSE bug 981060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981087">SUSE bug 981087</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0402</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0402" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0402" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0402" ref_url="https://www.suse.com/security/cve/CVE-2016-0402" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2016-0402/">CVE-2016-0402</cve>
	<bugzilla href="https://bugzilla.suse.com/960402">SUSE bug 960402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962743">SUSE bug 962743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0448</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0448" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0448" ref_url="https://www.suse.com/security/cve/CVE-2016-0448" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2016-0448/">CVE-2016-0448</cve>
	<bugzilla href="https://bugzilla.suse.com/960402">SUSE bug 960402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962743">SUSE bug 962743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0466</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0466" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0466" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0466" ref_url="https://www.suse.com/security/cve/CVE-2016-0466" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via vectors related to JAXP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2016-0466/">CVE-2016-0466</cve>
	<bugzilla href="https://bugzilla.suse.com/960402">SUSE bug 960402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962743">SUSE bug 962743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0475</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0475" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0475" ref_url="https://www.suse.com/security/cve/CVE-2016-0475" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00023.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2016-0475/">CVE-2016-0475</cve>
	<bugzilla href="https://bugzilla.suse.com/962743">SUSE bug 962743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0483</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0483" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0483" ref_url="https://www.suse.com/security/cve/CVE-2016-0483" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a heap-based buffer overflow in the readImage function, which allows remote attackers to execute arbitrary code via crafted image data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2016-0483/">CVE-2016-0483</cve>
	<bugzilla href="https://bugzilla.suse.com/960402">SUSE bug 960402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962743">SUSE bug 962743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0494</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0494" ref_url="https://www.suse.com/security/cve/CVE-2016-0494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2016-0494/">CVE-2016-0494</cve>
	<bugzilla href="https://bugzilla.suse.com/962743">SUSE bug 962743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963937">SUSE bug 963937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0505</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0505" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0505" ref_url="https://www.suse.com/security/cve/CVE-2016-0505" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Options.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0505/">CVE-2016-0505</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0546</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0546" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0546" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0546" ref_url="https://www.suse.com/security/cve/CVE-2016-0546" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2016-0546/">CVE-2016-0546</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0596</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0596" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0596" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0596" ref_url="https://www.suse.com/security/cve/CVE-2016-0596" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0596/">CVE-2016-0596</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0597</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0597" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0597" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0597" ref_url="https://www.suse.com/security/cve/CVE-2016-0597" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0597/">CVE-2016-0597</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0598</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0598" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0598" ref_url="https://www.suse.com/security/cve/CVE-2016-0598" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0598/">CVE-2016-0598</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0600</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0600" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0600" ref_url="https://www.suse.com/security/cve/CVE-2016-0600" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0600/">CVE-2016-0600</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160606" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0606</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0606" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0606" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0606" ref_url="https://www.suse.com/security/cve/CVE-2016-0606" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrity via unknown vectors related to encryption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0606/">CVE-2016-0606</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0608</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0608" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0608" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0608" ref_url="https://www.suse.com/security/cve/CVE-2016-0608" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to UDF.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0608/">CVE-2016-0608</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160609" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0609</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0609" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0609" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0609" ref_url="https://www.suse.com/security/cve/CVE-2016-0609" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0609/">CVE-2016-0609</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0610</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0610" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0610" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0610" ref_url="https://www.suse.com/security/cve/CVE-2016-0610" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0610/">CVE-2016-0610</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0616</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0616" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0616" ref_url="https://www.suse.com/security/cve/CVE-2016-0616" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001853.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0616/">CVE-2016-0616</cve>
	<bugzilla href="https://bugzilla.suse.com/962779">SUSE bug 962779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962817">SUSE bug 962817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962930">SUSE bug 962930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962931">SUSE bug 962931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962932">SUSE bug 962932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962934">SUSE bug 962934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962935">SUSE bug 962935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962936">SUSE bug 962936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962937">SUSE bug 962937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962938">SUSE bug 962938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962939">SUSE bug 962939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962941">SUSE bug 962941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962942">SUSE bug 962942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962943">SUSE bug 962943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962944">SUSE bug 962944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962945">SUSE bug 962945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962946">SUSE bug 962946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962947">SUSE bug 962947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962948">SUSE bug 962948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962949">SUSE bug 962949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962950">SUSE bug 962950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962951">SUSE bug 962951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962952">SUSE bug 962952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0636</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0636" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0636" ref_url="https://www.suse.com/security/cve/CVE-2016-0636" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0959-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="TID7010166" ref_url="https://www.suse.com/support/kb/doc/?id=7010166" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0971-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Hotspot sub-component.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0636/">CVE-2016-0636</cve>
	<bugzilla href="https://bugzilla.suse.com/972468">SUSE bug 972468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0640</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0640" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0640" ref_url="https://www.suse.com/security/cve/CVE-2016-0640" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-0640/">CVE-2016-0640</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0641</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0641" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0641" ref_url="https://www.suse.com/security/cve/CVE-2016-0641" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect confidentiality and availability via vectors related to MyISAM.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0641/">CVE-2016-0641</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0642</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0642" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0642" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0642" ref_url="https://www.suse.com/security/cve/CVE-2016-0642" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-0642/">CVE-2016-0642</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0644</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0644" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0644" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0644" ref_url="https://www.suse.com/security/cve/CVE-2016-0644" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DDL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0644/">CVE-2016-0644</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0646</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0646" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0646" ref_url="https://www.suse.com/security/cve/CVE-2016-0646" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0646/">CVE-2016-0646</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0649</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0649" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0649" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0649" ref_url="https://www.suse.com/security/cve/CVE-2016-0649" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to PS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0649/">CVE-2016-0649</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0650</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0650" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0650" ref_url="https://www.suse.com/security/cve/CVE-2016-0650" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to Replication.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0650/">CVE-2016-0650</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0651</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0651" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0651" ref_url="https://www.suse.com/security/cve/CVE-2016-0651" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0651/">CVE-2016-0651</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0668</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0668" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0668" ref_url="https://www.suse.com/security/cve/CVE-2016-0668" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to InnoDB.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0668/">CVE-2016-0668</cve>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0686</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0686" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0686" ref_url="https://www.suse.com/security/cve/CVE-2016-0686" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0686/">CVE-2016-0686</cve>
	<bugzilla href="https://bugzilla.suse.com/976340">SUSE bug 976340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0687</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0687" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0687" ref_url="https://www.suse.com/security/cve/CVE-2016-0687" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0687/">CVE-2016-0687</cve>
	<bugzilla href="https://bugzilla.suse.com/976340">SUSE bug 976340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0695</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0695" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0695" ref_url="https://www.suse.com/security/cve/CVE-2016-0695" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0695/">CVE-2016-0695</cve>
	<bugzilla href="https://bugzilla.suse.com/976340">SUSE bug 976340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0701</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0701" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0701" ref_url="https://www.suse.com/security/cve/CVE-2016-0701" source="SUSE CVE"/>
		<reference ref_id="TID7022627" ref_url="https://www.suse.com/support/kb/doc/?id=7022627" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
    <description>
    The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0701/">CVE-2016-0701</cve>
	<bugzilla href="https://bugzilla.suse.com/1071906">SUSE bug 1071906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176331">SUSE bug 1176331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195379">SUSE bug 1195379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963410">SUSE bug 963410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963413">SUSE bug 963413</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0702</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0702" ref_url="https://www.suse.com/security/cve/CVE-2016-0702" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021994" ref_url="https://www.suse.com/support/kb/doc/?id=7021994" source="SUSE-SU"/>
		<reference ref_id="TID7021995" ref_url="https://www.suse.com/support/kb/doc/?id=7021995" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0720-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1211-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00027.html" source="SUSE-SU"/>
    <description>
    The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a "CacheBleed" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0702/">CVE-2016-0702</cve>
	<bugzilla href="https://bugzilla.suse.com/1007806">SUSE bug 1007806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968050">SUSE bug 968050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/971238">SUSE bug 971238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990370">SUSE bug 990370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0705</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0705" ref_url="https://www.suse.com/security/cve/CVE-2016-0705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004658.html" source="SUSE-SU"/>
		<reference ref_id="TID7021744" ref_url="https://www.suse.com/support/kb/doc/?id=7021744" source="SUSE-SU"/>
		<reference ref_id="TID7021994" ref_url="https://www.suse.com/support/kb/doc/?id=7021994" source="SUSE-SU"/>
		<reference ref_id="TID7021995" ref_url="https://www.suse.com/support/kb/doc/?id=7021995" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0705/">CVE-2016-0705</cve>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968047">SUSE bug 968047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/971238">SUSE bug 971238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782659" comment="java-1_8_0-ibm-1.8.0_sr5.20-3.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782660" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782661" comment="java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782662" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0718</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0718" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0718" ref_url="https://www.suse.com/security/cve/CVE-2016-0718" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1508-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1512-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0718/">CVE-2016-0718</cve>
	<bugzilla href="https://bugzilla.suse.com/979441">SUSE bug 979441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0729</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0729" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0729" ref_url="https://www.suse.com/security/cve/CVE-2016-0729" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1026-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/002000.html" source="SUSE-SU"/>
		<reference ref_id="TID7017306" ref_url="https://www.suse.com/support/kb/doc/?id=7017306" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0966-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1808-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0729/">CVE-2016-0729</cve>
	<bugzilla href="https://bugzilla.suse.com/966822">SUSE bug 966822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481575" comment="libxerces-c-3_1-3.1.4-3.3.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481576" comment="libxerces-c-devel-3.1.4-3.3.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0736</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0736" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0736" ref_url="https://www.suse.com/security/cve/CVE-2016-0736" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002741.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0897-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0903-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00120.html" source="SUSE-SU"/>
    <description>
    In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0736/">CVE-2016-0736</cve>
	<bugzilla href="https://bugzilla.suse.com/1016712">SUSE bug 1016712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033513">SUSE bug 1033513</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0742</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0742" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0742" ref_url="https://www.suse.com/security/cve/CVE-2016-0742" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0371-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html" source="SUSE-SU"/>
    <description>
    The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafted UDP DNS response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0742/">CVE-2016-0742</cve>
	<bugzilla href="https://bugzilla.suse.com/963781">SUSE bug 963781</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488403" comment="nginx-1.14.0-4.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488404" comment="nginx-source-1.14.0-4.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0746</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0746" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0746" ref_url="https://www.suse.com/security/cve/CVE-2016-0746" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0371-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0746/">CVE-2016-0746</cve>
	<bugzilla href="https://bugzilla.suse.com/963778">SUSE bug 963778</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488403" comment="nginx-1.14.0-4.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488404" comment="nginx-source-1.14.0-4.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0747</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0747" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0747" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0747" ref_url="https://www.suse.com/security/cve/CVE-2016-0747" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0371-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html" source="SUSE-SU"/>
    <description>
    The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) via vectors related to arbitrary name resolution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-0747/">CVE-2016-0747</cve>
	<bugzilla href="https://bugzilla.suse.com/963775">SUSE bug 963775</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488403" comment="nginx-1.14.0-4.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488404" comment="nginx-source-1.14.0-4.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0749</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0749" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0749" ref_url="https://www.suse.com/security/cve/CVE-2016-0749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002108.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1561-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1725-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html" source="SUSE-SU"/>
    <description>
    The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0749/">CVE-2016-0749</cve>
	<bugzilla href="https://bugzilla.suse.com/982385">SUSE bug 982385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982386">SUSE bug 982386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488364" comment="libspice-server-devel-0.14.1-2.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488365" comment="libspice-server1-0.14.1-2.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0755</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0755" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0755" ref_url="https://www.suse.com/security/cve/CVE-2016-0755" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001848.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001852.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0360-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0373-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0376-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00047.html" source="SUSE-SU"/>
    <description>
    The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-0755/">CVE-2016-0755</cve>
	<bugzilla href="https://bugzilla.suse.com/962983">SUSE bug 962983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0764</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0764" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0764" ref_url="https://www.suse.com/security/cve/CVE-2016-0764" source="SUSE CVE"/>
    <description>
    Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0764/">CVE-2016-0764</cve>
	<bugzilla href="https://bugzilla.suse.com/974072">SUSE bug 974072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489051" comment="NetworkManager-lang-1.10.6-5.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333999" comment="NetworkManager is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337154" comment="NetworkManager-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335294" comment="libnm-glib-vpn1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335295" comment="libnm-glib4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335296" comment="libnm-util2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335297" comment="libnm0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009350646" comment="typelib-1_0-NM-1_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335298" comment="typelib-1_0-NMClient-1_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335299" comment="typelib-1_0-NetworkManager-1_0 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481450" comment="libnm0-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481451" comment="typelib-1_0-NM-1_0-1.10.6-5.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486571" comment="NetworkManager-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486572" comment="NetworkManager-devel-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486573" comment="libnm-glib-vpn1-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486574" comment="libnm-glib4-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486575" comment="libnm-util2-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486576" comment="typelib-1_0-NMClient-1_0-1.10.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486577" comment="typelib-1_0-NetworkManager-1_0-1.10.6-5.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0771</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0771" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0771" ref_url="https://www.suse.com/security/cve/CVE-2016-0771" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html" source="SUSE-SU"/>
    <description>
    The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0771/">CVE-2016-0771</cve>
	<bugzilla href="https://bugzilla.suse.com/968223">SUSE bug 968223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0772</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0772" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0772" ref_url="https://www.suse.com/security/cve/CVE-2016-0772" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002263.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1885-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-0772/">CVE-2016-0772</cve>
	<bugzilla href="https://bugzilla.suse.com/984751">SUSE bug 984751</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0777</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0777" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0777" ref_url="https://www.suse.com/security/cve/CVE-2016-0777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0120-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="TID7017154" ref_url="https://www.suse.com/support/kb/doc?id=7017154" source="SUSE-SU"/>
		<reference ref_id="TID7017155" ref_url="https://www.suse.com/support/kb/doc?id=7017155" source="SUSE-SU"/>
		<reference ref_id="TID7017180" ref_url="https://www.suse.com/support/kb/doc/?id=7017180" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0145-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00016.html" source="SUSE-SU"/>
    <description>
    The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0777/">CVE-2016-0777</cve>
	<bugzilla href="https://bugzilla.suse.com/961642">SUSE bug 961642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996040">SUSE bug 996040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488406" comment="openssh-fips-7.9p1-4.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481607" comment="openssh-7.9p1-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481608" comment="openssh-helpers-7.9p1-4.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0778</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0778" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0778" ref_url="https://www.suse.com/security/cve/CVE-2016-0778" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0120-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="TID7017154" ref_url="https://www.suse.com/support/kb/doc?id=7017154" source="SUSE-SU"/>
		<reference ref_id="TID7017155" ref_url="https://www.suse.com/support/kb/doc?id=7017155" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0145-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00016.html" source="SUSE-SU"/>
    <description>
    The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0778/">CVE-2016-0778</cve>
	<bugzilla href="https://bugzilla.suse.com/961645">SUSE bug 961645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996040">SUSE bug 996040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488406" comment="openssh-fips-7.9p1-4.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481607" comment="openssh-7.9p1-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481608" comment="openssh-helpers-7.9p1-4.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0787</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0787" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0787" ref_url="https://www.suse.com/security/cve/CVE-2016-0787" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001922.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001923.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00008.html" source="SUSE-SU"/>
    <description>
    The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0787/">CVE-2016-0787</cve>
	<bugzilla href="https://bugzilla.suse.com/1149968">SUSE bug 1149968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967026">SUSE bug 967026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968174">SUSE bug 968174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974691">SUSE bug 974691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481499" comment="libssh2-1-1.8.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481500" comment="libssh2-devel-1.8.0-4.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0794</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0794" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0794" ref_url="https://www.suse.com/security/cve/CVE-2016-0794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002146.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1415-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1805-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00050.html" source="SUSE-SU"/>
    <description>
    The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LotusWordPro (lwp) document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0794/">CVE-2016-0794</cve>
	<bugzilla href="https://bugzilla.suse.com/967014">SUSE bug 967014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967015">SUSE bug 967015</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0795</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0795" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0795" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0795" ref_url="https://www.suse.com/security/cve/CVE-2016-0795" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002146.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1415-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1805-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00050.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LwpTocSuperLayout record in a LotusWordPro (lwp) document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0795/">CVE-2016-0795</cve>
	<bugzilla href="https://bugzilla.suse.com/967014">SUSE bug 967014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967015">SUSE bug 967015</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0797</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0797" ref_url="https://www.suse.com/security/cve/CVE-2016-0797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0720-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0797/">CVE-2016-0797</cve>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968048">SUSE bug 968048</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990370">SUSE bug 990370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0798</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0798" ref_url="https://www.suse.com/security/cve/CVE-2016-0798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
    <description>
    Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0798/">CVE-2016-0798</cve>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968265">SUSE bug 968265</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0800</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0800" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0800" ref_url="https://www.suse.com/security/cve/CVE-2016-0800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0624-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7017297" ref_url="https://www.suse.com/support/kb/doc?id=7017297" source="SUSE-SU"/>
		<reference ref_id="TID7017315" ref_url="https://www.suse.com/support/kb/doc/?id=7017315" source="SUSE-SU"/>
		<reference ref_id="TID7017316" ref_url="https://www.suse.com/support/kb/doc/?id=7017316" source="SUSE-SU"/>
		<reference ref_id="TID7017317" ref_url="https://www.suse.com/support/kb/doc/?id=7017317" source="SUSE-SU"/>
		<reference ref_id="TID7017338" ref_url="https://www.suse.com/support/kb/doc/?id=7017338" source="SUSE-SU"/>
		<reference ref_id="TID7017374" ref_url="https://www.suse.com/support/kb/doc/?id=7017374" source="SUSE-SU"/>
		<reference ref_id="TID7021979" ref_url="https://www.suse.com/support/kb/doc/?id=7021979" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0720-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
    <description>
    The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0800/">CVE-2016-0800</cve>
	<bugzilla href="https://bugzilla.suse.com/1106871">SUSE bug 1106871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961377">SUSE bug 961377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968044">SUSE bug 968044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968046">SUSE bug 968046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968888">SUSE bug 968888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969591">SUSE bug 969591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979060">SUSE bug 979060</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0821</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-0821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0821" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-0821" ref_url="https://www.suse.com/security/cve/CVE-2016-0821" source="SUSE CVE"/>
    <description>
    The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the use of an uninitialized list entry, aka Android internal bug 26186802, a different vulnerability than CVE-2015-3636.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-0821/">CVE-2016-0821</cve>
	<bugzilla href="https://bugzilla.suse.com/987709">SUSE bug 987709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994624">SUSE bug 994624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161000031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1000031</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1000031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000031" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1000031" ref_url="https://www.suse.com/security/cve/CVE-2016-1000031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1212-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14044-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914044-1.html" source="SUSE-SU"/>
		<reference ref_id="TID7018113" ref_url="https://www.suse.com/support/kb/doc/?id=7018113" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00036.html" source="SUSE-SU"/>
    <description>
    Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1000031/">CVE-2016-1000031</cve>
	<bugzilla href="https://bugzilla.suse.com/1128963">SUSE bug 1128963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334484" comment="jakarta-commons-fileupload is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009500413" comment="jakarta-commons-fileupload-1.1.1-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161000110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1000110</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1000110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000110" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1000110" ref_url="https://www.suse.com/security/cve/CVE-2016-1000110" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002263.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1000110/">CVE-2016-1000110</cve>
	<bugzilla href="https://bugzilla.suse.com/988484">SUSE bug 988484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989523">SUSE bug 989523</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10002</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10002" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10002" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10002" ref_url="https://www.suse.com/security/cve/CVE-2016-10002" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002553.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0128-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002562.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0192-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00107.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0223-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00124.html" source="SUSE-SU"/>
    <description>
    Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-10002/">CVE-2016-10002</cve>
	<bugzilla href="https://bugzilla.suse.com/1016168">SUSE bug 1016168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488449" comment="squid-4.4-5.3.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10003</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10003" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10003" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10003" ref_url="https://www.suse.com/security/cve/CVE-2016-10003" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0128-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002562.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0192-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00107.html" source="SUSE-SU"/>
    <description>
    Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-10003/">CVE-2016-10003</cve>
	<bugzilla href="https://bugzilla.suse.com/1016169">SUSE bug 1016169</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488449" comment="squid-4.4-5.3.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10009</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10009" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10009" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10009" ref_url="https://www.suse.com/security/cve/CVE-2016-10009" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002972.html" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00178.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0674-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00032.html" source="SUSE-SU"/>
    <description>
    Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10009/">CVE-2016-10009</cve>
	<bugzilla href="https://bugzilla.suse.com/1016336">SUSE bug 1016336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016366">SUSE bug 1016366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016370">SUSE bug 1016370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1026634">SUSE bug 1026634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213504">SUSE bug 1213504</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488406" comment="openssh-fips-7.9p1-4.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481607" comment="openssh-7.9p1-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481608" comment="openssh-helpers-7.9p1-4.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10010</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10010" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10010" ref_url="https://www.suse.com/security/cve/CVE-2016-10010" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002592.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00178.html" source="SUSE-SU"/>
    <description>
    sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-20"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10010/">CVE-2016-10010</cve>
	<bugzilla href="https://bugzilla.suse.com/1016336">SUSE bug 1016336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016368">SUSE bug 1016368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021751">SUSE bug 1021751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196721">SUSE bug 1196721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488406" comment="openssh-fips-7.9p1-4.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481607" comment="openssh-7.9p1-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481608" comment="openssh-helpers-7.9p1-4.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10011</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10011" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10011" ref_url="https://www.suse.com/security/cve/CVE-2016-10011" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002972.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00178.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0674-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00032.html" source="SUSE-SU"/>
    <description>
    authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-10011/">CVE-2016-10011</cve>
	<bugzilla href="https://bugzilla.suse.com/1016336">SUSE bug 1016336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016369">SUSE bug 1016369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016370">SUSE bug 1016370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017870">SUSE bug 1017870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1026634">SUSE bug 1026634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1029445">SUSE bug 1029445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488406" comment="openssh-fips-7.9p1-4.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481607" comment="openssh-7.9p1-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481608" comment="openssh-helpers-7.9p1-4.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10012</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10012" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10012" ref_url="https://www.suse.com/security/cve/CVE-2016-10012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004804.html" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00178.html" source="SUSE-SU"/>
    <description>
    The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10012/">CVE-2016-10012</cve>
	<bugzilla href="https://bugzilla.suse.com/1006166">SUSE bug 1006166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016336">SUSE bug 1016336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016369">SUSE bug 1016369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016370">SUSE bug 1016370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017870">SUSE bug 1017870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1026634">SUSE bug 1026634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035742">SUSE bug 1035742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073044">SUSE bug 1073044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092582">SUSE bug 1092582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488406" comment="openssh-fips-7.9p1-4.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481607" comment="openssh-7.9p1-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481608" comment="openssh-helpers-7.9p1-4.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10013</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10013" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10013" ref_url="https://www.suse.com/security/cve/CVE-2016-10013" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3221-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10013/">CVE-2016-10013</cve>
	<bugzilla href="https://bugzilla.suse.com/1016340">SUSE bug 1016340</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10024</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10024" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10024" ref_url="https://www.suse.com/security/cve/CVE-2016-10024" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3221-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10024/">CVE-2016-10024</cve>
	<bugzilla href="https://bugzilla.suse.com/1014298">SUSE bug 1014298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10025</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10025" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10025" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10025" ref_url="https://www.suse.com/security/cve/CVE-2016-10025" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00001.html" source="SUSE-SU"/>
    <description>
    VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10025/">CVE-2016-10025</cve>
	<bugzilla href="https://bugzilla.suse.com/1014300">SUSE bug 1014300</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10028</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10028" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10028" ref_url="https://www.suse.com/security/cve/CVE-2016-10028" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10028/">CVE-2016-10028</cve>
	<bugzilla href="https://bugzilla.suse.com/1017084">SUSE bug 1017084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017085">SUSE bug 1017085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185981">SUSE bug 1185981</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10029</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10029" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10029" ref_url="https://www.suse.com/security/cve/CVE-2016-10029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a scanout id in a VIRTIO_GPU_CMD_SET_SCANOUT command larger than num_scanouts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-10029/">CVE-2016-10029</cve>
	<bugzilla href="https://bugzilla.suse.com/1017081">SUSE bug 1017081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017082">SUSE bug 1017082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10030</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10030" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10030" ref_url="https://www.suse.com/security/cve/CVE-2016-10030" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006511.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006517.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2607-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008484.html" source="SUSE-SU"/>
    <description>
    The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node. That vulnerability could allow a user to assume control of an arbitrary file on the system. Any exploitation of this is dependent on the user being able to cause or anticipate the failure (non-zero return code) of a Prolog script that their job would run on. This issue affects all Slurm versions from 0.6.0 (September 2005) to present. Workarounds to prevent exploitation of this are to either disable your Prolog script, or modify it such that it always returns 0 ("success") and adjust it to set the node as down using scontrol instead of relying on the slurmd to handle that automatically. If you do not have a Prolog set you are unaffected by this issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-08-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10030/">CVE-2016-10030</cve>
	<bugzilla href="https://bugzilla.suse.com/1018371">SUSE bug 1018371</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009496739" comment="pdsh-2.33-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496740" comment="pdsh-dshgroup-2.33-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496741" comment="pdsh-genders-2.33-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496742" comment="pdsh-machines-2.33-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496743" comment="pdsh-netgroup-2.33-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496744" comment="pdsh-slurm-2.33-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496745" comment="pdsh-slurm_18_08-2.33-7.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009726974" comment="libnss_slurm2_20_11 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726975" comment="libpmi0_20_11 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726976" comment="libslurm36 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726977" comment="perl-slurm_20_11 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726978" comment="slurm_20_11 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726979" comment="slurm_20_11-auth-none is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726980" comment="slurm_20_11-config is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726981" comment="slurm_20_11-config-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726982" comment="slurm_20_11-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726983" comment="slurm_20_11-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726984" comment="slurm_20_11-lua is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726985" comment="slurm_20_11-munge is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726986" comment="slurm_20_11-node is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726987" comment="slurm_20_11-pam_slurm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726988" comment="slurm_20_11-plugins is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726989" comment="slurm_20_11-slurmdbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726990" comment="slurm_20_11-sql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726991" comment="slurm_20_11-sview is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726992" comment="slurm_20_11-torque is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726993" comment="slurm_20_11-webdoc is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10044</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10044" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10044" ref_url="https://www.suse.com/security/cve/CVE-2016-10044" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10044/">CVE-2016-10044</cve>
	<bugzilla href="https://bugzilla.suse.com/1023992">SUSE bug 1023992</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10087</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10087" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10087" ref_url="https://www.suse.com/security/cve/CVE-2016-10087" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002749.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002778.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002787.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0937-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0942-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1037-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00063.html" source="SUSE-SU"/>
    <description>
    The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10087/">CVE-2016-10087</cve>
	<bugzilla href="https://bugzilla.suse.com/1017646">SUSE bug 1017646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149680">SUSE bug 1149680</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10092</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10092" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10092" ref_url="https://www.suse.com/security/cve/CVE-2016-10092" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00061.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10092/">CVE-2016-10092</cve>
	<bugzilla href="https://bugzilla.suse.com/1017693">SUSE bug 1017693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122679">SUSE bug 1122679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782665" comment="libtiff5-32bit-4.0.9-5.20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782663" comment="libtiff-devel-4.0.9-5.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782664" comment="libtiff5-4.0.9-5.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10093</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10093" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10093" ref_url="https://www.suse.com/security/cve/CVE-2016-10093" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00061.html" source="SUSE-SU"/>
    <description>
    Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10093/">CVE-2016-10093</cve>
	<bugzilla href="https://bugzilla.suse.com/1017693">SUSE bug 1017693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122679">SUSE bug 1122679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782665" comment="libtiff5-32bit-4.0.9-5.20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782663" comment="libtiff-devel-4.0.9-5.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782664" comment="libtiff5-4.0.9-5.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10094</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10094" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10094" ref_url="https://www.suse.com/security/cve/CVE-2016-10094" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00061.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10094/">CVE-2016-10094</cve>
	<bugzilla href="https://bugzilla.suse.com/1017693">SUSE bug 1017693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122679">SUSE bug 1122679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782665" comment="libtiff5-32bit-4.0.9-5.20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782663" comment="libtiff-devel-4.0.9-5.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782664" comment="libtiff5-4.0.9-5.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10095</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10095" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10095" ref_url="https://www.suse.com/security/cve/CVE-2016-10095" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0073-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10095/">CVE-2016-10095</cve>
	<bugzilla href="https://bugzilla.suse.com/1017690">SUSE bug 1017690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960341">SUSE bug 960341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983436">SUSE bug 983436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10109</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10109" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10109" ref_url="https://www.suse.com/security/cve/CVE-2016-10109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002597.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0178-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00099.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10109/">CVE-2016-10109</cve>
	<bugzilla href="https://bugzilla.suse.com/1017902">SUSE bug 1017902</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481464" comment="libpcsclite1-1.8.24-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481465" comment="libpcscspy0-1.8.24-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481466" comment="pcsc-lite-1.8.24-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481467" comment="pcsc-lite-devel-1.8.24-1.14 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10128</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10128" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10128" ref_url="https://www.suse.com/security/cve/CVE-2016-10128" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10128/">CVE-2016-10128</cve>
	<bugzilla href="https://bugzilla.suse.com/1019036">SUSE bug 1019036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487772" comment="libgit2-26-0.26.8-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487773" comment="libgit2-devel-0.26.8-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10129</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10129" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10129" ref_url="https://www.suse.com/security/cve/CVE-2016-10129" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html" source="SUSE-SU"/>
    <description>
    The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10129/">CVE-2016-10129</cve>
	<bugzilla href="https://bugzilla.suse.com/1019036">SUSE bug 1019036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487772" comment="libgit2-26-0.26.8-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487773" comment="libgit2-devel-0.26.8-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10130</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10130" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10130" ref_url="https://www.suse.com/security/cve/CVE-2016-10130" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html" source="SUSE-SU"/>
    <description>
    The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-10130/">CVE-2016-10130</cve>
	<bugzilla href="https://bugzilla.suse.com/1019037">SUSE bug 1019037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487772" comment="libgit2-26-0.26.8-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487773" comment="libgit2-devel-0.26.8-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10147</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10147" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10147" ref_url="https://www.suse.com/security/cve/CVE-2016-10147" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00022.html" source="SUSE-SU"/>
    <description>
    crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10147/">CVE-2016-10147</cve>
	<bugzilla href="https://bugzilla.suse.com/1020381">SUSE bug 1020381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020429">SUSE bug 1020429</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10155</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10155" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10155" ref_url="https://www.suse.com/security/cve/CVE-2016-10155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10155/">CVE-2016-10155</cve>
	<bugzilla href="https://bugzilla.suse.com/1021129">SUSE bug 1021129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024183">SUSE bug 1024183</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10156</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10156" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10156" ref_url="https://www.suse.com/security/cve/CVE-2016-10156" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00058.html" source="SUSE-SU"/>
    <description>
    A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10156/">CVE-2016-10156</cve>
	<bugzilla href="https://bugzilla.suse.com/1020601">SUSE bug 1020601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021969">SUSE bug 1021969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086936">SUSE bug 1086936</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481501" comment="libsystemd0-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481502" comment="libsystemd0-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481503" comment="libudev-devel-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481504" comment="libudev1-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481505" comment="libudev1-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481506" comment="systemd-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481507" comment="systemd-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481508" comment="systemd-bash-completion-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481509" comment="systemd-container-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481510" comment="systemd-coredump-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481511" comment="systemd-devel-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481512" comment="systemd-sysvinit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481513" comment="udev-234-24.25.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10165</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10165" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10165" ref_url="https://www.suse.com/security/cve/CVE-2016-10165" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004806.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10165/">CVE-2016-10165</cve>
	<bugzilla href="https://bugzilla.suse.com/1021364">SUSE bug 1021364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064069">SUSE bug 1064069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009732463" comment="lcms2 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684916" comment="liblcms2-2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684917" comment="liblcms2-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10166</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10166" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10166" ref_url="https://www.suse.com/security/cve/CVE-2016-10166" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0556-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0588-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10166/">CVE-2016-10166</cve>
	<bugzilla href="https://bugzilla.suse.com/1022069">SUSE bug 1022069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022263">SUSE bug 1022263</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10167</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10167" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10167" ref_url="https://www.suse.com/security/cve/CVE-2016-10167" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0556-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0588-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10167/">CVE-2016-10167</cve>
	<bugzilla href="https://bugzilla.suse.com/1022069">SUSE bug 1022069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022264">SUSE bug 1022264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10168</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10168" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10168" ref_url="https://www.suse.com/security/cve/CVE-2016-10168" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002645.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0556-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003246.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0588-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10168/">CVE-2016-10168</cve>
	<bugzilla href="https://bugzilla.suse.com/1022069">SUSE bug 1022069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022265">SUSE bug 1022265</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10190</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10190" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10190" ref_url="https://www.suse.com/security/cve/CVE-2016-10190" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0961-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1433-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10190/">CVE-2016-10190</cve>
	<bugzilla href="https://bugzilla.suse.com/1022920">SUSE bug 1022920</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10191</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10191" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10191" ref_url="https://www.suse.com/security/cve/CVE-2016-10191" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1433-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1531-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1532-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10191/">CVE-2016-10191</cve>
	<bugzilla href="https://bugzilla.suse.com/1022921">SUSE bug 1022921</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10192</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10192" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10192" ref_url="https://www.suse.com/security/cve/CVE-2016-10192" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1433-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1531-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1532-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10192/">CVE-2016-10192</cve>
	<bugzilla href="https://bugzilla.suse.com/1022922">SUSE bug 1022922</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10198</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10198" ref_url="https://www.suse.com/security/cve/CVE-2016-10198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002801.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1076-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00081.html" source="SUSE-SU"/>
    <description>
    The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10198/">CVE-2016-10198</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024014">SUSE bug 1024014</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10199</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10199" ref_url="https://www.suse.com/security/cve/CVE-2016-10199" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002801.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1076-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00081.html" source="SUSE-SU"/>
    <description>
    The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted tag value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10199/">CVE-2016-10199</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024017">SUSE bug 1024017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10208</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10208" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10208" ref_url="https://www.suse.com/security/cve/CVE-2016-10208" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00000.html" source="SUSE-SU"/>
    <description>
    The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10208/">CVE-2016-10208</cve>
	<bugzilla href="https://bugzilla.suse.com/1023377">SUSE bug 1023377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10214</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10214" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10214" ref_url="https://www.suse.com/security/cve/CVE-2016-10214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0902-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00119.html" source="SUSE-SU"/>
    <description>
    Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10214/">CVE-2016-10214</cve>
	<bugzilla href="https://bugzilla.suse.com/1024244">SUSE bug 1024244</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488212" comment="libvirglrenderer0-0.6.0-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488213" comment="virglrenderer-devel-0.6.0-2.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10217</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10217" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10217" ref_url="https://www.suse.com/security/cve/CVE-2016-10217" source="SUSE CVE"/>
    <description>
    The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is mishandled in the color management module.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10217/">CVE-2016-10217</cve>
	<bugzilla href="https://bugzilla.suse.com/1032130">SUSE bug 1032130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10218</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10218" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10218" ref_url="https://www.suse.com/security/cve/CVE-2016-10218" source="SUSE CVE"/>
    <description>
    The pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10218/">CVE-2016-10218</cve>
	<bugzilla href="https://bugzilla.suse.com/1032135">SUSE bug 1032135</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10219</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10219" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10219" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10219" ref_url="https://www.suse.com/security/cve/CVE-2016-10219" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003973.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0421-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00039.html" source="SUSE-SU"/>
    <description>
    The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10219/">CVE-2016-10219</cve>
	<bugzilla href="https://bugzilla.suse.com/1032138">SUSE bug 1032138</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10220</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10220" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10220" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10220" ref_url="https://www.suse.com/security/cve/CVE-2016-10220" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00014.html" source="SUSE-SU"/>
    <description>
    The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file that is mishandled in the PDF Transparency module.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10220/">CVE-2016-10220</cve>
	<bugzilla href="https://bugzilla.suse.com/1032120">SUSE bug 1032120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036453">SUSE bug 1036453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10228</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10228" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10228" ref_url="https://www.suse.com/security/cve/CVE-2016-10228" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:547-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020935.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009837.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010482.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010483.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010636.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:52-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:53-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:55-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:56-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:57-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:63-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:64-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:66-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:67-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:68-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:69-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:70-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:71-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:72-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:73-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:74-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:75-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:76-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:77-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:78-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:79-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:80-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:82-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010105.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:83-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010107.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:85-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010109.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:86-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:88-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010111.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:89-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:90-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:94-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:96-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:97-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:98-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009781.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1560-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4LDTHO3OJZ2XD7I3ONIRIUSKEMP42OY2/" source="SUSE-SU"/>
    <description>
    The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-10228/">CVE-2016-10228</cve>
	<bugzilla href="https://bugzilla.suse.com/1027496">SUSE bug 1027496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334045" comment="glibc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335227" comment="glibc-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335238" comment="glibc-devel-static is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338796" comment="glibc-extra is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335228" comment="glibc-i18ndata is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335232" comment="glibc-info is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335229" comment="glibc-locale is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338797" comment="glibc-locale-base is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335233" comment="glibc-profile is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335230" comment="nscd is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334045" comment="glibc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335234" comment="glibc-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335227" comment="glibc-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335235" comment="glibc-devel-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335238" comment="glibc-devel-static is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338796" comment="glibc-extra is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335228" comment="glibc-i18ndata is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335232" comment="glibc-info is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335229" comment="glibc-locale is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335236" comment="glibc-locale-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338797" comment="glibc-locale-base is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335233" comment="glibc-profile is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335230" comment="nscd is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10243</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10243" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10243" ref_url="https://www.suse.com/security/cve/CVE-2016-10243" source="SUSE CVE"/>
    <description>
    TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10243/">CVE-2016-10243</cve>
	<bugzilla href="https://bugzilla.suse.com/1028271">SUSE bug 1028271</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486682" comment="libkpathsea6-6.2.3-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486683" comment="libptexenc1-1.3.5-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486684" comment="libsynctex1-1.18-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486685" comment="libtexlua52-5-5.2.4-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486686" comment="libtexluajit2-2.1.0beta2-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486687" comment="perl-biber-2017.20170520.svn30357-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486688" comment="texlive-2017.20170520-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482808" comment="texlive-12many-2017.133.0.0.3svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482809" comment="texlive-2up-2017.133.1.2svn41578-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482810" comment="texlive-Asana-Math-2017.133.0.000.955svn37556-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482811" comment="texlive-Asana-Math-fonts-2017.133.0.000.955svn37556-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482812" comment="texlive-ESIEEcv-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482813" comment="texlive-FAQ-en-2017.133.3.28svn34303-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482814" comment="texlive-GS1-2017.133.15svn27540-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482815" comment="texlive-HA-prosper-2017.133.4.21svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482816" comment="texlive-IEEEconf-2017.133.1.4svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482817" comment="texlive-IEEEtran-2017.133.1.8bsvn38238-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482818" comment="texlive-MemoirChapStyles-2017.133.1.7esvn25918-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482819" comment="texlive-SIstyle-2017.133.2.3asvn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482820" comment="texlive-SIunits-2017.133.1.36svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482821" comment="texlive-Tabbing-2017.133.svn17022-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482822" comment="texlive-Type1fonts-2017.133.2.14svn19603-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482823" comment="texlive-a0poster-2017.133.1.22bsvn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482824" comment="texlive-a2ping-2017.133.svn29725-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486689" comment="texlive-a2ping-bin-2017.20170520.svn27321-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482826" comment="texlive-a4wide-2017.133.svn20943-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482827" comment="texlive-a5comb-2017.133.4svn17020-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482828" comment="texlive-aastex-2017.133.6.0svn39929-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482829" comment="texlive-abbr-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482830" comment="texlive-abc-2017.133.2.0bsvn41157-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482831" comment="texlive-abntex2-2017.133.1.9.6svn39913-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482832" comment="texlive-abraces-2017.133.1._svn27880-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482833" comment="texlive-abstract-2017.133.1.2asvn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482834" comment="texlive-abstyles-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482835" comment="texlive-academicons-2017.133.1.8.0svn44380-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482836" comment="texlive-academicons-fonts-2017.133.1.8.0svn44380-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482837" comment="texlive-accanthis-2017.133.svn32089-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482838" comment="texlive-accanthis-fonts-2017.133.svn32089-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482839" comment="texlive-accfonts-2017.133.0.0.25svn18835-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486690" comment="texlive-accfonts-bin-2017.20170520.svn12688-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482841" comment="texlive-achemso-2017.133.3.10isvn44425-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482842" comment="texlive-acmart-2017.133.1.39svn44367-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482843" comment="texlive-acmconf-2017.133.1.3svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482844" comment="texlive-acro-2017.133.2.7asvn43186-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482845" comment="texlive-acronym-2017.133.1.41svn36582-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482846" comment="texlive-acroterm-2017.133.0.0.1svn20498-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482847" comment="texlive-active-conf-2017.133.0.0.3asvn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482848" comment="texlive-actuarialangle-2017.133.2.0svn43751-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482849" comment="texlive-actuarialsymbol-2017.133.1.0svn43768-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482850" comment="texlive-addfont-2017.133.1svn41972-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482851" comment="texlive-addlines-2017.133.0.0.2asvn37805-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482852" comment="texlive-adfathesis-2017.133.2.42svn26048-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482853" comment="texlive-adforn-2017.133.1.001_b_2svn20019-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482854" comment="texlive-adforn-fonts-2017.133.1.001_b_2svn20019-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482855" comment="texlive-adfsymbols-2017.133.1.001svn19766-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482856" comment="texlive-adfsymbols-fonts-2017.133.1.001svn19766-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482857" comment="texlive-adhocfilelist-2017.133.svn29349-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486691" comment="texlive-adhocfilelist-bin-2017.20170520.svn28038-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482859" comment="texlive-adjmulticol-2017.133.1.1svn28936-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482860" comment="texlive-adjustbox-2017.133.1.0svn26555-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482861" comment="texlive-adobemapping-2017.133.svn44085-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482862" comment="texlive-adrconv-2017.133.1.3svn17683-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482863" comment="texlive-adtrees-2017.133.1.0svn39438-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482864" comment="texlive-advdate-2017.133.svn20538-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482865" comment="texlive-ae-2017.133.1.4svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482866" comment="texlive-aecc-2017.133.1.0svn28574-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482867" comment="texlive-aeguill-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482868" comment="texlive-afm2pl-2017.133.svn44166-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486692" comment="texlive-afm2pl-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482870" comment="texlive-afparticle-2017.133.1.3svn35900-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482871" comment="texlive-afthesis-2017.133.2.7svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482872" comment="texlive-aguplus-2017.133.1.6bsvn17156-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482873" comment="texlive-aiaa-2017.133.3.6svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482874" comment="texlive-aichej-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482875" comment="texlive-ajl-2017.133.svn34016-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482876" comment="texlive-akktex-2017.133.0.0.3.2svn26055-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482877" comment="texlive-akletter-2017.133.1.5isvn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482878" comment="texlive-alegreya-2017.133.svn42077-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482879" comment="texlive-alegreya-fonts-2017.133.svn42077-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482880" comment="texlive-aleph-2017.133.svn44166-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486693" comment="texlive-aleph-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482882" comment="texlive-alertmessage-2017.133.1.1svn38055-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482883" comment="texlive-alg-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482884" comment="texlive-algorithm2e-2017.133.5.1svn38805-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482885" comment="texlive-algorithmicx-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482886" comment="texlive-algorithms-2017.133.0.0.1svn42428-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482887" comment="texlive-alkalami-2017.133.1.000svn44497-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482888" comment="texlive-alkalami-fonts-2017.133.1.000svn44497-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482889" comment="texlive-allrunes-2017.133.2.1.1svn42221-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482890" comment="texlive-allrunes-fonts-2017.133.2.1.1svn42221-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482891" comment="texlive-almfixed-2017.133.0.0.92svn35065-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482892" comment="texlive-almfixed-fonts-2017.133.0.0.92svn35065-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482893" comment="texlive-alnumsec-2017.133.0.0.03svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482894" comment="texlive-alterqcm-2017.133.3.7csvn23385-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482895" comment="texlive-altfont-2017.133.1.1svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482896" comment="texlive-ametsoc-2017.133.4.3.2svn36030-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482897" comment="texlive-amiri-2017.133.0.0.109svn44303-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482898" comment="texlive-amiri-fonts-2017.133.0.0.109svn44303-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482899" comment="texlive-amsaddr-2017.133.1.1svn29630-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482900" comment="texlive-amscls-2017.133.svn36804-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482901" comment="texlive-amsfonts-2017.133.3.04svn29208-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482902" comment="texlive-amsfonts-fonts-2017.133.3.04svn29208-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482903" comment="texlive-amslatex-primer-2017.133.2.3svn28980-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482904" comment="texlive-amsldoc-it-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482905" comment="texlive-amsldoc-vn-2017.133.2.0svn21855-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482906" comment="texlive-amsmath-2017.133.svn43813-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482907" comment="texlive-amsmath-it-2017.133.svn22930-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482908" comment="texlive-amsrefs-2017.133.2.14svn30646-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482909" comment="texlive-amstex-2017.133.2.2svn44166-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486694" comment="texlive-amstex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482911" comment="texlive-amsthdoc-it-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482912" comment="texlive-animate-2017.133.svn44410-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482913" comment="texlive-anonchap-2017.133.1.1asvn17049-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482914" comment="texlive-anonymouspro-2017.133.2.1svn33441-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482915" comment="texlive-anonymouspro-fonts-2017.133.2.1svn33441-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482916" comment="texlive-answers-2017.133.2.16svn35032-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482917" comment="texlive-antiqua-2017.133.001.003svn24266-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482918" comment="texlive-antiqua-fonts-2017.133.001.003svn24266-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482919" comment="texlive-antomega-2017.133.0.0.8svn21933-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482920" comment="texlive-antt-2017.133.2.08svn18651-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482921" comment="texlive-antt-fonts-2017.133.2.08svn18651-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482922" comment="texlive-anufinalexam-2017.133.svn26053-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482923" comment="texlive-anyfontsize-2017.133.svn17050-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482924" comment="texlive-anysize-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482925" comment="texlive-aobs-tikz-2017.133.1.0svn32662-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482926" comment="texlive-aomart-2017.133.1.20svn44282-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482927" comment="texlive-apa-2017.133.1.3.4svn42428-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482928" comment="texlive-apa6-2017.133.2.31svn44477-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482929" comment="texlive-apa6e-2017.133.0.0.3svn23350-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482930" comment="texlive-apacite-2017.133.6.03svn31264-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482931" comment="texlive-apalike-german-2017.133.svn42045-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482932" comment="texlive-apalike2-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482933" comment="texlive-apnum-2017.133.1.6svn39710-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482934" comment="texlive-appendix-2017.133.1.2bsvn42428-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482935" comment="texlive-appendixnumberbeamer-2017.133.svn40322-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482936" comment="texlive-apprends-latex-2017.133.4.02svn19306-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482937" comment="texlive-apptools-2017.133.1.0svn28400-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482938" comment="texlive-apxproof-2017.133.1.0.5svn44478-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482939" comment="texlive-arabi-2017.133.1.1svn25095-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482940" comment="texlive-arabi-add-2017.133.1.0svn37709-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482941" comment="texlive-arabi-fonts-2017.133.1.1svn25095-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482942" comment="texlive-arabluatex-2017.133.1.8.4svn44241-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482943" comment="texlive-arabtex-2017.133.3.17svn25711-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482944" comment="texlive-arabtex-fonts-2017.133.3.17svn25711-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482945" comment="texlive-arabxetex-2017.133.1.2.1svn38299-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482946" comment="texlive-aramaic-serto-2017.133.1.0svn30042-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482947" comment="texlive-aramaic-serto-fonts-2017.133.1.0svn30042-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482948" comment="texlive-arara-2017.133.3.0svn29762-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486695" comment="texlive-arara-bin-2017.20170520.svn29036-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482950" comment="texlive-archaeologie-2017.133.2.31svn44484-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482951" comment="texlive-archaic-2017.133.svn38005-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482952" comment="texlive-archaic-fonts-2017.133.svn38005-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482953" comment="texlive-arcs-2017.133.1svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482954" comment="texlive-arev-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482955" comment="texlive-arev-fonts-2017.133.svn15878-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482956" comment="texlive-arimo-2017.133.svn42880-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482957" comment="texlive-arimo-fonts-2017.133.svn42880-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482958" comment="texlive-armtex-2017.133.3.0_beta3svn33894-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482959" comment="texlive-armtex-fonts-2017.133.3.0_beta3svn33894-6.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482960" comment="texlive-around-the-bend-2017.135.svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482961" comment="texlive-arphic-2017.135.svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482962" comment="texlive-arphic-fonts-2017.135.svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482963" comment="texlive-arphic-ttf-2017.135.svn42675-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482964" comment="texlive-arphic-ttf-fonts-2017.135.svn42675-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482965" comment="texlive-arrayjobx-2017.135.1.04svn18125-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482966" comment="texlive-arraysort-2017.135.1.0svn31576-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482967" comment="texlive-arsclassica-2017.135.march_2017svn43509-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482968" comment="texlive-articleingud-2017.135.0.0.3svn38741-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482969" comment="texlive-arydshln-2017.135.1.73svn40847-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482970" comment="texlive-asaetr-2017.135.1.0asvn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482971" comment="texlive-asapsym-2017.135.1.0svn40201-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482972" comment="texlive-asapsym-fonts-2017.135.1.0svn40201-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482973" comment="texlive-ascelike-2017.135.2.3svn29129-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482974" comment="texlive-ascii-chart-2017.135.svn20536-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482975" comment="texlive-ascii-font-2017.135.2.0svn29989-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482976" comment="texlive-ascii-font-fonts-2017.135.2.0svn29989-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482977" comment="texlive-asciilist-2017.135.2.2svn41158-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482978" comment="texlive-askmaps-2017.135.0.0.1svn32320-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482979" comment="texlive-aspectratio-2017.135.2.0svn25243-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482980" comment="texlive-aspectratio-fonts-2017.135.2.0svn25243-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482981" comment="texlive-assignment-2017.135.svn20431-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482982" comment="texlive-assoccnt-2017.135.0.0.8svn38497-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482983" comment="texlive-astro-2017.135.2.20svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482984" comment="texlive-asyfig-2017.135.0.0.1csvn17512-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482985" comment="texlive-asymptote-2017.135.2.41svn43843-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486696" comment="texlive-asymptote-bin-2017.20170520.svn43843-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482987" comment="texlive-asymptote-by-example-zh-cn-2017.135.svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482988" comment="texlive-asymptote-faq-zh-cn-2017.135.svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482989" comment="texlive-asymptote-manual-zh-cn-2017.135.svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482990" comment="texlive-asypictureb-2017.135.0.0.3svn33490-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482991" comment="texlive-attachfile-2017.135.1.9svn42099-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482992" comment="texlive-aucklandthesis-2017.135.svn41506-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482993" comment="texlive-augie-2017.135.svn18948-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482994" comment="texlive-augie-fonts-2017.135.svn18948-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482995" comment="texlive-auncial-new-2017.135.2.0svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482996" comment="texlive-auncial-new-fonts-2017.135.2.0svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482997" comment="texlive-aurical-2017.135.1.5svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482998" comment="texlive-aurical-fonts-2017.135.1.5svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482999" comment="texlive-aurl-2017.135.svn41853-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483000" comment="texlive-authoraftertitle-2017.135.0.0.9svn24863-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483001" comment="texlive-authorindex-2017.135.svn26313-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486697" comment="texlive-authorindex-bin-2017.20170520.svn18790-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483003" comment="texlive-auto-pst-pdf-2017.135.0.0.6svn23723-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483004" comment="texlive-autoaligne-2017.135.1.3svn43195-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483005" comment="texlive-autoarea-2017.135.0.0.3asvn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483006" comment="texlive-autobreak-2017.135.0.0.3svn43337-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483007" comment="texlive-automata-2017.135.0.0.3svn19717-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483008" comment="texlive-autonum-2017.135.0.0.3.11svn36084-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483009" comment="texlive-autopdf-2017.135.1.1svn32377-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483010" comment="texlive-autosp-2017.135.svn44166-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486698" comment="texlive-autosp-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483012" comment="texlive-avantgar-2017.135.svn31835-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483013" comment="texlive-avantgar-fonts-2017.135.svn31835-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483014" comment="texlive-avremu-2017.135.0.0.1svn35373-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483015" comment="texlive-awesomebox-2017.135.0.0.1svn44131-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483016" comment="texlive-axodraw2-2017.135.2.1.0bsvn44396-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483017" comment="texlive-b1encoding-2017.135.1.0svn21271-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483018" comment="texlive-babel-2017.135.3.10svn44427-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483019" comment="texlive-babel-albanian-2017.135.1.0csvn30254-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483020" comment="texlive-babel-azerbaijani-2017.135.1.0asvn44197-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483021" comment="texlive-babel-basque-2017.135.1.0fsvn30256-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483022" comment="texlive-babel-belarusian-2017.135.1.3hsvn40636-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483023" comment="texlive-babel-bosnian-2017.135.1.1svn38174-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483024" comment="texlive-babel-breton-2017.135.1.0hsvn30257-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483025" comment="texlive-babel-bulgarian-2017.135.1.2gsvn31902-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483026" comment="texlive-babel-catalan-2017.135.2.2psvn30259-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483027" comment="texlive-babel-croatian-2017.135.1.3lsvn35198-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483028" comment="texlive-babel-czech-2017.135.3.1asvn30261-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483029" comment="texlive-babel-danish-2017.135.1.3rsvn30262-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483030" comment="texlive-babel-dutch-2017.135.3.8isvn30263-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483031" comment="texlive-babel-english-2017.135.3.3qsvn44495-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483032" comment="texlive-babel-esperanto-2017.135.1.4tsvn30265-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483033" comment="texlive-babel-estonian-2017.135.1.1asvn38064-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483034" comment="texlive-babel-finnish-2017.135.1.3qsvn30267-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483035" comment="texlive-babel-french-2017.135.3.3asvn44270-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483036" comment="texlive-babel-friulan-2017.135.1.3svn39861-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483037" comment="texlive-babel-galician-2017.135.4.3csvn30270-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483038" comment="texlive-babel-georgian-2017.135.2.1svn33527-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483039" comment="texlive-babel-german-2017.135.2.9svn42424-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483040" comment="texlive-babel-greek-2017.135.1.9gsvn42010-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483041" comment="texlive-babel-hebrew-2017.135.2.3hsvn30273-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483042" comment="texlive-babel-hungarian-2017.135.1.5csvn41435-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483043" comment="texlive-babel-icelandic-2017.135.1.2bsvn39387-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483044" comment="texlive-babel-indonesian-2017.135.1.0msvn43235-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483045" comment="texlive-babel-interlingua-2017.135.1.6svn30276-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483046" comment="texlive-babel-irish-2017.135.1.0hsvn30277-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483047" comment="texlive-babel-italian-2017.135.1.3nsvn36645-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483048" comment="texlive-babel-japanese-2017.135.2.1svn43145-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483049" comment="texlive-babel-kurmanji-2017.135.1.1svn30279-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483050" comment="texlive-babel-latin-2017.135.3.5svn38173-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483051" comment="texlive-babel-latvian-2017.135.2.0asvn34377-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483052" comment="texlive-babel-macedonian-2017.135.svn39587-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483053" comment="texlive-babel-malay-2017.135.1.0msvn43234-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483054" comment="texlive-babel-norsk-2017.135.2.0isvn30281-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483055" comment="texlive-babel-occitan-2017.135.0.0.2svn39608-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483056" comment="texlive-babel-piedmontese-2017.135.1.0svn30282-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483057" comment="texlive-babel-polish-2017.135.1.2lsvn30283-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483058" comment="texlive-babel-portuges-2017.135.1.2qsvn30284-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483059" comment="texlive-babel-romanian-2017.135.1.2lsvn30285-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483060" comment="texlive-babel-romansh-2017.135.svn30286-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483061" comment="texlive-babel-russian-2017.135.1.3isvn42885-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483062" comment="texlive-babel-samin-2017.135.1.0csvn30288-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483063" comment="texlive-babel-scottish-2017.135.1.0gsvn30289-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483064" comment="texlive-babel-serbian-2017.135.1.0dsvn30290-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483065" comment="texlive-babel-serbianc-2017.135.2.2svn30348-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483066" comment="texlive-babel-slovak-2017.135.3.1asvn30292-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483067" comment="texlive-babel-slovenian-2017.135.1.2isvn30351-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483068" comment="texlive-babel-sorbian-2017.135.lower_sorbian_1.0g._upper_1.0ksvn30294-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483069" comment="texlive-babel-spanglish-2017.135.0.0.3svn37629-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483070" comment="texlive-babel-spanish-2017.135.5.0psvn39920-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483071" comment="texlive-babel-swedish-2017.135.2.3dsvn30296-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483072" comment="texlive-babel-thai-2017.135.1.0.0svn30564-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483073" comment="texlive-babel-turkish-2017.135.1.3bsvn33284-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483074" comment="texlive-babel-ukrainian-2017.135.1.4svn44550-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483075" comment="texlive-babel-vietnamese-2017.135.1.4svn39246-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483076" comment="texlive-babel-welsh-2017.135.1.1asvn38372-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483077" comment="texlive-babelbib-2017.135.1.31svn25245-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483078" comment="texlive-background-2017.135.2.1svn42428-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483079" comment="texlive-backnaur-2017.135.1.1svn28513-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483080" comment="texlive-baekmuk-2017.135.2.2svn42106-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483081" comment="texlive-baekmuk-fonts-2017.135.2.2svn42106-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483082" comment="texlive-bagpipe-2017.135.3.02svn34393-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483083" comment="texlive-bangorcsthesis-2017.135.1.5.1svn41919-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483084" comment="texlive-bangorexam-2017.135.1.2.0svn43500-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483085" comment="texlive-bangtex-2017.135.svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483086" comment="texlive-bankstatement-2017.135.0.0.9.2svn38857-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483087" comment="texlive-barcodes-2017.135.svn15878-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483088" comment="texlive-bardiag-2017.135.0.0.4asvn22013-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483089" comment="texlive-barr-2017.135.svn38479-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483090" comment="texlive-bartel-chess-fonts-2017.135.svn20619-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483091" comment="texlive-bashful-2017.135.0.0.93svn25597-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483092" comment="texlive-basicarith-2017.135.1.1svn35460-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483093" comment="texlive-baskervald-2017.135.1.016svn19490-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483094" comment="texlive-baskervald-fonts-2017.135.1.016svn19490-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483095" comment="texlive-baskervaldx-2017.135.1.072svn43461-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483096" comment="texlive-baskervaldx-fonts-2017.135.1.072svn43461-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483097" comment="texlive-baskervillef-2017.135.1.043svn43484-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483098" comment="texlive-baskervillef-fonts-2017.135.1.043svn43484-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483099" comment="texlive-basque-book-2017.135.1.20svn32924-6.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483100" comment="texlive-basque-date-2017.133.1.05svn26477-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483101" comment="texlive-bbcard-2017.133.svn19440-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483102" comment="texlive-bbding-2017.133.1.01svn17186-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483103" comment="texlive-bbm-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483104" comment="texlive-bbm-macros-2017.133.svn17224-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483105" comment="texlive-bbold-2017.133.1.01svn17187-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483106" comment="texlive-bbold-type1-2017.133.svn33143-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483107" comment="texlive-bbold-type1-fonts-2017.133.svn33143-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483108" comment="texlive-bchart-2017.133.0.0.1.3svn43928-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483109" comment="texlive-bclogo-2017.133.3.1svn39364-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483110" comment="texlive-beamer-2017.133.3.41svn43073-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483111" comment="texlive-beamer-FUBerlin-2017.133.0.0.02bsvn38159-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483112" comment="texlive-beamer-tut-pt-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483113" comment="texlive-beamer-verona-2017.133.0.0.2svn39180-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483114" comment="texlive-beamer2thesis-2017.133.2.2svn27539-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483115" comment="texlive-beameraudience-2017.133.0.0.1svn23427-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483116" comment="texlive-beamercolorthemeowl-2017.133.0.0.1.1svn40105-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483117" comment="texlive-beamerdarkthemes-2017.133.0.0.4.1svn35101-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483118" comment="texlive-beamerposter-2017.133.1.12svn37009-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483119" comment="texlive-beamersubframe-2017.133.0.0.2svn23510-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483120" comment="texlive-beamerswitch-2017.133.1.2svn44568-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483121" comment="texlive-beamertheme-cuerna-2017.133.svn42161-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483122" comment="texlive-beamertheme-detlevcm-2017.133.1.02svn39048-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483123" comment="texlive-beamertheme-epyt-2017.133.1.0svn41404-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483124" comment="texlive-beamertheme-metropolis-2017.133.1.2svn43031-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483125" comment="texlive-beamertheme-phnompenh-2017.133.1.0svn39100-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483126" comment="texlive-beamertheme-upenn-bc-2017.133.1.0svn29937-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483127" comment="texlive-beamerthemejltree-2017.133.1.1svn21977-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483128" comment="texlive-beamerthemenirma-2017.133.0.0.1svn20765-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483129" comment="texlive-beebe-2017.133.svn44569-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483130" comment="texlive-begingreek-2017.133.1.5svn36294-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483131" comment="texlive-begriff-2017.133.1.6svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483132" comment="texlive-belleek-2017.133.svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483133" comment="texlive-belleek-fonts-2017.133.svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483134" comment="texlive-bengali-2017.133.svn20987-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483135" comment="texlive-bera-2017.133.svn20031-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483136" comment="texlive-bera-fonts-2017.133.svn20031-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483137" comment="texlive-berenisadf-2017.133.1.004svn32215-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483138" comment="texlive-berenisadf-fonts-2017.133.1.004svn32215-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483139" comment="texlive-besjournals-2017.133.svn35428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483140" comment="texlive-bestpapers-2017.133.1.0svn38708-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483141" comment="texlive-betababel-2017.133.0.0.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483142" comment="texlive-beton-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483143" comment="texlive-beuron-2017.133.1.1svn42038-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483144" comment="texlive-beuron-fonts-2017.133.1.1svn42038-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483145" comment="texlive-bewerbung-2017.133.1.1svn37880-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483146" comment="texlive-bez123-2017.133.1.1bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483147" comment="texlive-bezos-2017.133.svn25507-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483148" comment="texlive-bgreek-2017.133.0.0.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483149" comment="texlive-bgteubner-2017.133.2.11svn44205-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483150" comment="texlive-bguq-2017.133.0.0.4svn27401-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483151" comment="texlive-bguq-fonts-2017.133.0.0.4svn27401-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483152" comment="texlive-bhcexam-2017.133.0.0.4svn39041-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483153" comment="texlive-bib-fr-2017.133.1.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483154" comment="texlive-bibarts-2017.133.2.1svn40096-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483155" comment="texlive-biber-2017.133.2.7svn43910-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486699" comment="texlive-biber-bin-2017.20170520.svn42679-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483157" comment="texlive-bibexport-2017.133.3.02svn39928-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486700" comment="texlive-bibexport-bin-2017.20170520.svn16219-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483159" comment="texlive-bibhtml-2017.133.2.0.2svn31607-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483160" comment="texlive-biblatex-2017.133.3.7svn42680-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483161" comment="texlive-biblatex-abnt-2017.133.3.0.1svn43510-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483162" comment="texlive-biblatex-anonymous-2017.133.2.6.0svn43043-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483163" comment="texlive-biblatex-apa-2017.133.7.4svn42893-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483164" comment="texlive-biblatex-archaeology-2017.133.1.2svn44522-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483165" comment="texlive-biblatex-arthistory-bonn-2017.133.1.0svn43468-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483166" comment="texlive-biblatex-bookinarticle-2017.133.1.3.1asvn40323-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483167" comment="texlive-biblatex-bookinother-2017.133.2.3.0svn43619-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483168" comment="texlive-biblatex-bwl-2017.133.0.0.02svn26556-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483169" comment="texlive-biblatex-caspervector-2017.133.0.0.2.7svn43371-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483170" comment="texlive-biblatex-cheatsheet-2017.133.svn43650-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483171" comment="texlive-biblatex-chem-2017.133.1.1ssvn43116-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483172" comment="texlive-biblatex-chicago-2017.133.1.0rc4svn44156-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483173" comment="texlive-biblatex-claves-2017.133.1.2.0svn43723-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483174" comment="texlive-biblatex-dw-2017.133.1.7svn42649-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483175" comment="texlive-biblatex-fiwi-2017.133.1.6csvn43082-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483176" comment="texlive-biblatex-gb7714-2015-2017.133.1.0gsvn43555-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483177" comment="texlive-biblatex-gost-2017.133.1.14svn44172-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483178" comment="texlive-biblatex-historian-2017.133.0.0.4svn19787-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483179" comment="texlive-biblatex-ieee-2017.133.1.2dsvn43620-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483180" comment="texlive-biblatex-ijsra-2017.133.0.0.1svn41634-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483181" comment="texlive-biblatex-iso690-2017.133.0.0.3.2svn44066-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483182" comment="texlive-biblatex-juradiss-2017.133.0.0.1gsvn29252-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483183" comment="texlive-biblatex-lni-2017.133.0.0.4svn43032-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483184" comment="texlive-biblatex-luh-ipw-2017.133.0.0.3svn32180-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483185" comment="texlive-biblatex-manuscripts-philology-2017.133.1.12.2svn43108-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483186" comment="texlive-biblatex-mla-2017.133.1.9svn42445-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483187" comment="texlive-biblatex-morenames-2017.133.1.3.1svn43049-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483188" comment="texlive-biblatex-multiple-dm-2017.133.1.0.1svn37081-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483189" comment="texlive-biblatex-musuos-2017.133.1.0svn24097-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483190" comment="texlive-biblatex-nature-2017.133.1.3bsvn43382-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483191" comment="texlive-biblatex-nejm-2017.133.0.0.4svn24011-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483192" comment="texlive-biblatex-nottsclassic-2017.133.0.0.1svn41596-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483193" comment="texlive-biblatex-opcit-booktitle-2017.133.1.8.0svn43621-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483194" comment="texlive-biblatex-oxref-2017.133.0.0.10svn44385-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483195" comment="texlive-biblatex-philosophy-2017.133.1.9.5svn43860-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483196" comment="texlive-biblatex-phys-2017.133.1.0bsvn41922-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483197" comment="texlive-biblatex-publist-2017.133.1.7svn43765-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483198" comment="texlive-biblatex-realauthor-2017.133.2.7.0svn42390-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483199" comment="texlive-biblatex-sbl-2017.133.0.0.8.1svn42972-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483200" comment="texlive-biblatex-science-2017.133.1.1gsvn42147-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483201" comment="texlive-biblatex-shortfields-2017.133.1.0.0svn43738-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483202" comment="texlive-biblatex-source-division-2017.133.2.4.1svn41675-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483203" comment="texlive-biblatex-subseries-2017.133.1.2.0svn43330-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483204" comment="texlive-biblatex-swiss-legal-2017.133.1.1.2asvn32750-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483205" comment="texlive-biblatex-trad-2017.133.0.0.3svn41656-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483206" comment="texlive-biblatex-true-citepages-omit-2017.133.1.3.0svn42120-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483207" comment="texlive-bibleref-2017.133.1.16svn42162-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483208" comment="texlive-bibleref-french-2017.133.2.3.1svn35497-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483209" comment="texlive-bibleref-german-2017.133.1.0asvn21923-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483210" comment="texlive-bibleref-lds-2017.133.1.0svn25526-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483211" comment="texlive-bibleref-mouth-2017.133.1.0svn25527-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483212" comment="texlive-bibleref-parse-2017.133.1.1svn22054-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483213" comment="texlive-bibletext-2017.133.0.0.1svn39785-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483214" comment="texlive-biblist-2017.133.svn17116-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483215" comment="texlive-bibtex-2017.133.0.0.99dsvn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486701" comment="texlive-bibtex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483217" comment="texlive-bibtex8-2017.133.3.71svn29725-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486702" comment="texlive-bibtex8-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483219" comment="texlive-bibtexperllibs-2017.133.1.3svn43549-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483220" comment="texlive-bibtexu-2017.133.svn29743-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486703" comment="texlive-bibtexu-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483222" comment="texlive-bibtopic-2017.133.1.1asvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483223" comment="texlive-bibtopicprefix-2017.133.1.10svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483224" comment="texlive-bibunits-2017.133.2.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483225" comment="texlive-bidi-2017.133.30.7svn44546-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483226" comment="texlive-bidi-atbegshi-2017.133.0.0.1svn35154-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483227" comment="texlive-bidicontour-2017.133.0.0.2svn34631-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483228" comment="texlive-bidihl-2017.133.0.0.1csvn37795-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483229" comment="texlive-bidipagegrid-2017.133.0.0.2svn34632-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483230" comment="texlive-bidipresentation-2017.133.0.0.3svn35267-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483231" comment="texlive-bidishadowtext-2017.133.0.0.1svn34633-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483232" comment="texlive-bigfoot-2017.133.2.1svn38248-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483233" comment="texlive-bigints-2017.133.svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486704" comment="texlive-bin-devel-2017.20170520-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483235" comment="texlive-binarytree-2017.133.1.01svn41777-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483236" comment="texlive-binomexp-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483237" comment="texlive-biochemistry-colors-2017.133.1.00svn43960-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483238" comment="texlive-biocon-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483239" comment="texlive-biolett-bst-2017.133.svn42217-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483240" comment="texlive-bitelist-2017.133.0.0.1svn25779-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483241" comment="texlive-bitpattern-2017.133.svn39073-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483242" comment="texlive-bizcard-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483243" comment="texlive-blacklettert1-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483244" comment="texlive-blindtext-2017.133.2.0svn25039-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483245" comment="texlive-blkarray-2017.133.0.0.07svn36406-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483246" comment="texlive-blochsphere-2017.133.1.1svn38388-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483247" comment="texlive-block-2017.133.svn17209-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483248" comment="texlive-blockdraw_mp-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483249" comment="texlive-bloques-2017.133.1.0svn22490-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483250" comment="texlive-blox-2017.133.2.5svn35014-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483251" comment="texlive-bnumexpr-2017.133.1.2asvn38638-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483252" comment="texlive-bodegraph-2017.133.1.4svn20047-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483253" comment="texlive-bohr-2017.133.1.0svn37657-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483254" comment="texlive-boisik-2017.133.0.0.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483255" comment="texlive-boites-2017.133.1.1svn32235-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483256" comment="texlive-bold-extra-2017.133.0.0.1svn17076-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483257" comment="texlive-boldtensors-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483258" comment="texlive-bondgraph-2017.133.1.0svn21670-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483259" comment="texlive-bondgraphs-2017.133.1.0.1svn36605-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483260" comment="texlive-bookcover-2017.133.2.1svn43861-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483261" comment="texlive-bookdb-2017.133.0.0.2svn37536-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483262" comment="texlive-bookest-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483263" comment="texlive-bookhands-2017.133.svn23609-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483264" comment="texlive-bookhands-fonts-2017.133.svn23609-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483265" comment="texlive-booklet-2017.133.0.0.7bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483266" comment="texlive-bookman-2017.133.svn31835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483267" comment="texlive-bookman-fonts-2017.133.svn31835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483268" comment="texlive-booktabs-2017.133.1.618033svn40846-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483269" comment="texlive-booktabs-de-2017.133.1.61803svn21907-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483270" comment="texlive-booktabs-fr-2017.133.1.00svn21948-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483271" comment="texlive-boolexpr-2017.133.3.14svn17830-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483272" comment="texlive-boondox-2017.133.1.02dsvn43344-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483273" comment="texlive-boondox-fonts-2017.133.1.02dsvn43344-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483274" comment="texlive-bophook-2017.133.0.0.02svn17062-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483275" comment="texlive-borceux-2017.133.svn21047-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483276" comment="texlive-bosisio-2017.133.svn16989-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483277" comment="texlive-boxedminipage-2017.133.2svn17087-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483278" comment="texlive-boxedminipage2e-2017.133.1.0svn36477-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483279" comment="texlive-boxhandler-2017.133.1.30svn28031-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483280" comment="texlive-bpchem-2017.133.1.06svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483281" comment="texlive-bpolynomial-2017.133.0.0.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483282" comment="texlive-br-lex-2017.133.svn39701-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483283" comment="texlive-bracketkey-2017.133.1.0svn17129-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483284" comment="texlive-braids-2017.133.1.0svn23790-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483285" comment="texlive-braille-2017.133.svn20655-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483286" comment="texlive-braket-2017.133.svn17127-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483287" comment="texlive-brandeis-dissertation-2017.133.2.0svn32047-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483288" comment="texlive-breakcites-2017.133.svn21014-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483289" comment="texlive-breakurl-2017.133.1.40svn29901-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483290" comment="texlive-bredzenie-2017.133.1.0svn44371-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483291" comment="texlive-breqn-2017.133.0.0.98esvn43071-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483292" comment="texlive-bropd-2017.133.1.2svn35383-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483293" comment="texlive-brushscr-2017.133.svn28363-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483294" comment="texlive-brushscr-fonts-2017.133.svn28363-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483295" comment="texlive-bullcntr-2017.133.0.0.04svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483296" comment="texlive-bundledoc-2017.133.3.2svn35041-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486705" comment="texlive-bundledoc-bin-2017.20170520.svn17794-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483298" comment="texlive-burmese-2017.133.svn25185-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483299" comment="texlive-burmese-fonts-2017.133.svn25185-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483300" comment="texlive-bussproofs-2017.133.1.1svn27488-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483301" comment="texlive-bxbase-2017.133.1.1svn44481-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483302" comment="texlive-bxcalc-2017.133.1.0svn44514-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483303" comment="texlive-bxcjkjatype-2017.133.0.0.3svn42292-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483304" comment="texlive-bxdpx-beamer-2017.133.0.0.3svn41813-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483305" comment="texlive-bxdvidriver-2017.133.0.0.2asvn43219-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483306" comment="texlive-bxeepic-2017.133.0.0.2svn30559-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483307" comment="texlive-bxenclose-2017.133.0.0.2svn40213-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483308" comment="texlive-bxjalipsum-2017.133.0.0.3asvn43369-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483309" comment="texlive-bxjaprnind-2017.133.0.0.3asvn44554-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483310" comment="texlive-bxjscls-2017.133.1.5bsvn43741-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483311" comment="texlive-bxnewfont-2017.133.0.0.2bsvn44173-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483312" comment="texlive-bxorigcapt-2017.133.0.0.2asvn44195-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483313" comment="texlive-bxpapersize-2017.133.0.0.3asvn44174-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483314" comment="texlive-bxpdfver-2017.133.0.0.4svn43201-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483315" comment="texlive-bytefield-2017.133.2.3svn38736-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483316" comment="texlive-c-pascal-2017.133.1.2svn18337-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483317" comment="texlive-c90-2017.133.svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483318" comment="texlive-cabin-2017.133.svn43687-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483319" comment="texlive-cabin-fonts-2017.133.svn43687-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483320" comment="texlive-cachepic-2017.133.1.0svn26313-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486706" comment="texlive-cachepic-bin-2017.20170520.svn15543-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483322" comment="texlive-caladea-2017.133.svn34991-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483323" comment="texlive-caladea-fonts-2017.133.svn34991-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483324" comment="texlive-calcage-2017.133.0.0.90svn27725-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483325" comment="texlive-calctab-2017.133.0.0.6.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483326" comment="texlive-calculation-2017.133.1.0svn35973-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483327" comment="texlive-calculator-2017.133.2.0svn33041-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483328" comment="texlive-calligra-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483329" comment="texlive-calligra-type1-2017.133.001.000svn24302-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483330" comment="texlive-calligra-type1-fonts-2017.133.001.000svn24302-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483331" comment="texlive-callouts-2017.133.svn43515-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483332" comment="texlive-calrsfs-2017.133.svn17125-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483333" comment="texlive-cals-2017.133.2.4.2svn43003-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483334" comment="texlive-calxxxx-yyyy-2017.133.20.17asvn44131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483335" comment="texlive-cancel-2017.133.2.2svn32508-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483336" comment="texlive-canoniclayout-2017.133.0.0.4svn24523-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483337" comment="texlive-cantarell-2017.133.2.4svn27066-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483338" comment="texlive-cantarell-fonts-2017.133.2.4svn27066-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483339" comment="texlive-capt-of-2017.133.svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483340" comment="texlive-captcont-2017.133.2.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483341" comment="texlive-captdef-2017.133.svn17353-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483342" comment="texlive-caption-2017.133.svn41409-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483343" comment="texlive-carbohydrates-2017.133.0.0.1svn39000-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483344" comment="texlive-carlisle-2017.133.svn18258-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483345" comment="texlive-carlito-2017.133.svn35002-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483346" comment="texlive-carlito-fonts-2017.133.svn35002-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483347" comment="texlive-carolmin-ps-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483348" comment="texlive-carolmin-ps-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483349" comment="texlive-cascadilla-2017.133.1.8.2svn25144-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483350" comment="texlive-cases-2017.133.2.5svn17123-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483351" comment="texlive-casyl-2017.133.2.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483352" comment="texlive-catchfilebetweentags-2017.133.1.1svn21476-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483353" comment="texlive-catcodes-2017.133.r0.2svn38859-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483354" comment="texlive-catechis-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483355" comment="texlive-catoptions-2017.133.0.0.2.7hsvn35069-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483356" comment="texlive-cbcoptic-2017.133.0.0.2svn16666-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483357" comment="texlive-cbcoptic-fonts-2017.133.0.0.2svn16666-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483358" comment="texlive-cbfonts-2017.133.svn31624-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483359" comment="texlive-cbfonts-fd-2017.133.1.1svn39936-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483360" comment="texlive-cbfonts-fonts-2017.133.svn31624-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483361" comment="texlive-cc-pl-2017.133.1.02.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483362" comment="texlive-cc-pl-fonts-2017.133.1.02.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483363" comment="texlive-ccaption-2017.133.3.2csvn23443-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483364" comment="texlive-ccfonts-2017.133.1.1svn17122-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483365" comment="texlive-ccicons-2017.133.1.5svn30020-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483366" comment="texlive-ccicons-fonts-2017.133.1.5svn30020-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483367" comment="texlive-cclicenses-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483368" comment="texlive-cd-2017.133.1.4svn34452-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483369" comment="texlive-cd-cover-2017.133.1.0svn17121-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483370" comment="texlive-cdpbundl-2017.133.0.0.36svn36697-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483371" comment="texlive-cell-2017.133.svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483372" comment="texlive-cellspace-2017.133.1.6svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483373" comment="texlive-celtic-2017.133.1.1svn39797-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483374" comment="texlive-censor-2017.133.3.21svn31332-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483375" comment="texlive-cfr-initials-2017.133.1.01svn36728-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483376" comment="texlive-cfr-lm-2017.133.1.5svn36195-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483377" comment="texlive-changebar-2017.133.3.5csvn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483378" comment="texlive-changelayout-2017.133.1.0svn16094-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483379" comment="texlive-changepage-2017.133.1.0csvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483380" comment="texlive-changes-2017.133.2.0.4svn41737-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483381" comment="texlive-chappg-2017.133.2.1bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483382" comment="texlive-chapterfolder-2017.133.2.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483383" comment="texlive-charter-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483384" comment="texlive-charter-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483385" comment="texlive-chbibref-2017.133.1.0svn17120-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483386" comment="texlive-checkcites-2017.133.1.0isvn28572-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486707" comment="texlive-checkcites-bin-2017.20170520.svn25623-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483388" comment="texlive-checklistings-2017.133.1.0svn38300-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486708" comment="texlive-checklistings-bin-2017.20170520.svn38300-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483390" comment="texlive-chem-journal-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483391" comment="texlive-chemarrow-2017.133.0.0.9svn17146-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483392" comment="texlive-chemarrow-fonts-2017.133.0.0.9svn17146-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483393" comment="texlive-chembst-2017.133.0.0.2.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483394" comment="texlive-chemcompounds-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483395" comment="texlive-chemcono-2017.133.1.3svn17119-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483396" comment="texlive-chemexec-2017.133.1.0svn21632-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483397" comment="texlive-chemfig-2017.133.1.2esvn44513-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483398" comment="texlive-chemformula-2017.133.4.15esvn43583-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483399" comment="texlive-chemgreek-2017.133.1.1svn42758-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483400" comment="texlive-chemmacros-2017.133.5.8svn44023-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483401" comment="texlive-chemnum-2017.133.1.2svn40522-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483402" comment="texlive-chemschemex-2017.133.1.1svn43747-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483403" comment="texlive-chemstyle-2017.133.2.0msvn31096-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483404" comment="texlive-cherokee-2017.133.svn21046-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483405" comment="texlive-chess-2017.133.1.2svn20582-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483406" comment="texlive-chess-problem-diagrams-2017.133.1.12svn39317-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483407" comment="texlive-chessboard-2017.133.1.7svn33801-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483408" comment="texlive-chessfss-2017.133.1.2asvn19440-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483409" comment="texlive-chet-2017.133.2.1svn38161-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483410" comment="texlive-chextras-2017.133.1.01svn27118-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483411" comment="texlive-chicago-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483412" comment="texlive-chicago-annote-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483413" comment="texlive-chickenize-2017.133.0.0.2.4svn42341-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483414" comment="texlive-childdoc-2017.133.1.5svn44512-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483415" comment="texlive-chivo-2017.133.1.0svn40931-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483416" comment="texlive-chivo-fonts-2017.133.1.0svn40931-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483417" comment="texlive-chkfloat-2017.133.0.0.1svn27473-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483418" comment="texlive-chktex-2017.133.1.7.6svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486709" comment="texlive-chktex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483420" comment="texlive-chletter-2017.133.2.0svn20060-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483421" comment="texlive-chngcntr-2017.133.1.0asvn17157-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483422" comment="texlive-chronology-2017.133.1.1.1svn37934-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483423" comment="texlive-chronosys-2017.133.1.2svn26700-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483424" comment="texlive-chscite-2017.133.2.9999svn28552-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483425" comment="texlive-churchslavonic-2017.133.0.0.2.1svn42751-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483426" comment="texlive-cinzel-2017.133.svn34408-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483427" comment="texlive-cinzel-fonts-2017.133.svn34408-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483428" comment="texlive-circ-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483429" comment="texlive-circuitikz-2017.133.0.0.8.3svn44488-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483430" comment="texlive-cite-2017.133.5.5svn36428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483431" comment="texlive-citeall-2017.133.1.2svn37103-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483432" comment="texlive-cje-2017.133.1.01svn44454-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483433" comment="texlive-cjhebrew-2017.133.0.0.2asvn43444-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483434" comment="texlive-cjhebrew-fonts-2017.133.0.0.2asvn43444-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483435" comment="texlive-cjk-2017.133.4.8.4svn36951-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483436" comment="texlive-cjk-gs-integrate-2017.133.20170505.0svn44207-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486710" comment="texlive-cjk-gs-integrate-bin-2017.20170520.svn37223-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483438" comment="texlive-cjk-ko-2017.133.1.8svn40373-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483439" comment="texlive-cjkpunct-2017.133.4.8.4svn41119-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483440" comment="texlive-cjkutils-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486711" comment="texlive-cjkutils-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483442" comment="texlive-classics-2017.133.0.0.1svn29018-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483443" comment="texlive-classicthesis-2017.133.4.2svn38304-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483444" comment="texlive-classpack-2017.133.0.0.77svn33101-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483445" comment="texlive-cleanthesis-2017.133.0.0.3.1svn38221-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483446" comment="texlive-clearsans-2017.133.svn34405-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483447" comment="texlive-clearsans-fonts-2017.133.svn34405-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483448" comment="texlive-clefval-2017.133.0svn16549-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483449" comment="texlive-cleveref-2017.133.0.0.19svn32513-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483450" comment="texlive-clipboard-2017.133.0.0.2svn28876-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483451" comment="texlive-clock-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483452" comment="texlive-cloze-2017.133.1.2svn41531-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483453" comment="texlive-clrscode-2017.133.1.7svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483454" comment="texlive-clrscode3e-2017.133.svn34887-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483455" comment="texlive-cm-2017.133.svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483456" comment="texlive-cm-lgc-2017.133.0.0.5svn28250-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483457" comment="texlive-cm-lgc-fonts-2017.133.0.0.5svn28250-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483458" comment="texlive-cm-super-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483459" comment="texlive-cm-super-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483460" comment="texlive-cm-unicode-2017.133.0.0.7.0svn19445-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483461" comment="texlive-cm-unicode-fonts-2017.133.0.0.7.0svn19445-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483462" comment="texlive-cmap-2017.133.1.0hsvn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483463" comment="texlive-cmarrows-2017.133.0.0.9svn24378-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483464" comment="texlive-cmbright-2017.133.8.1svn21107-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483465" comment="texlive-cmcyr-2017.133.svn39273-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483466" comment="texlive-cmcyr-fonts-2017.133.svn39273-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483467" comment="texlive-cmdstring-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483468" comment="texlive-cmdtrack-2017.133.svn28910-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483469" comment="texlive-cmexb-2017.133.svn40785-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483470" comment="texlive-cmexb-fonts-2017.133.svn40785-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483471" comment="texlive-cmextra-2017.133.svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483472" comment="texlive-cmll-2017.133.svn17964-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483473" comment="texlive-cmll-fonts-2017.133.svn17964-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483474" comment="texlive-cmpica-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483475" comment="texlive-cmpj-2017.133.3.01svn44283-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483476" comment="texlive-cmsd-2017.133.svn18787-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483477" comment="texlive-cmtiup-2017.133.2.1svn39728-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483478" comment="texlive-cnbwp-2017.133.svn32550-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483479" comment="texlive-cnltx-2017.133.0.0.13svn38138-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483480" comment="texlive-cns-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483481" comment="texlive-cntformats-2017.133.0.0.7svn34668-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483482" comment="texlive-cntperchap-2017.133.0.0.3svn37572-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483483" comment="texlive-cochineal-2017.133.1.042svn43462-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483484" comment="texlive-cochineal-fonts-2017.133.1.042svn43462-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483485" comment="texlive-codedoc-2017.133.0.0.3svn17630-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483486" comment="texlive-codepage-2017.133.svn21126-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483487" comment="texlive-codesection-2017.133.0.0.1svn34481-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483488" comment="texlive-codicefiscaleitaliano-2017.133.1.2svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483489" comment="texlive-collcell-2017.133.0.0.5svn21539-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483490" comment="texlive-collectbox-2017.133.0.0.4bsvn26557-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483491" comment="texlive-collref-2017.133.2.0bsvn35084-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483492" comment="texlive-colordoc-2017.133.svn18270-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483493" comment="texlive-colorinfo-2017.133.0.0.3csvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483494" comment="texlive-coloring-2017.133.0.0.2svn41042-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483495" comment="texlive-colorsep-2017.133.svn13293-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483496" comment="texlive-colorspace-2017.133.1.2.0svn42228-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483497" comment="texlive-colortab-2017.133.1.0svn22155-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483498" comment="texlive-colortbl-2017.133.1.0asvn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483499" comment="texlive-colorwav-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483500" comment="texlive-colorweb-2017.133.1.3svn31490-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483501" comment="texlive-colourchange-2017.133.1.22svn21741-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483502" comment="texlive-combelow-2017.133.0.0.99fsvn18462-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483503" comment="texlive-combine-2017.133.0.0.7asvn19361-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483504" comment="texlive-combinedgraphics-2017.133.0.0.2.2svn27198-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483505" comment="texlive-combofont-2017.133.0.0.1svn44491-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483506" comment="texlive-comfortaa-2017.133.2.3svn27536-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483507" comment="texlive-comfortaa-fonts-2017.133.2.3svn27536-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483508" comment="texlive-comicneue-2017.133.1.1svn42851-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483509" comment="texlive-comicneue-fonts-2017.133.1.1svn42851-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483510" comment="texlive-comma-2017.133.1.2svn18259-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483511" comment="texlive-commado-2017.133.r0.11asvn38875-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483512" comment="texlive-commath-2017.133.0.0.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483513" comment="texlive-comment-2017.133.3.8svn41927-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483514" comment="texlive-compactbib-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483515" comment="texlive-complexity-2017.133.0.0.76svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483516" comment="texlive-components-of-TeX-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483517" comment="texlive-comprehensive-2017.133.12.3svn43001-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483518" comment="texlive-computational-complexity-2017.133.2.25fsvn39903-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483519" comment="texlive-concepts-2017.133.0.0.0.5_r1svn29020-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483520" comment="texlive-concmath-2017.133.svn17219-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483521" comment="texlive-concmath-fonts-2017.133.svn17218-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483522" comment="texlive-concprog-2017.133.svn18791-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483523" comment="texlive-concrete-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483524" comment="texlive-confproc-2017.133.0.0.8svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483525" comment="texlive-constants-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483526" comment="texlive-conteq-2017.133.0.0.1.1svn37868-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483527" comment="texlive-context-2017.133.svn44436-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483528" comment="texlive-context-account-2017.133.svn23167-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483529" comment="texlive-context-algorithmic-2017.133.svn31026-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483530" comment="texlive-context-animation-2017.133.svn36188-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483531" comment="texlive-context-annotation-2017.133.svn36188-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486712" comment="texlive-context-bin-2017.20170520.svn34112-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483533" comment="texlive-context-bnf-2017.133.svn23167-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483534" comment="texlive-context-chromato-2017.133.svn23167-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483535" comment="texlive-context-cmscbf-2017.133.svn42327-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483536" comment="texlive-context-cmttbf-2017.133.svn42328-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483537" comment="texlive-context-construction-plan-2017.133.svn23167-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483538" comment="texlive-context-cyrillicnumbers-2017.133.svn29905-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483539" comment="texlive-context-degrade-2017.133.svn23167-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483540" comment="texlive-context-fancybreak-2017.133.svn36948-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483541" comment="texlive-context-filter-2017.133.svn42326-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483542" comment="texlive-context-fonts-2017.133.svn44436-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483543" comment="texlive-context-french-2017.133.svn24582-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483544" comment="texlive-context-fullpage-2017.133.svn23167-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483545" comment="texlive-context-gantt-2017.133.svn27472-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483546" comment="texlive-context-gnuplot-2017.133.svn30380-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483547" comment="texlive-context-inifile-2017.133.svn42329-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483548" comment="texlive-context-layout-2017.133.svn42330-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483549" comment="texlive-context-letter-2017.133.svn38202-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483550" comment="texlive-context-lettrine-2017.133.svn23167-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483551" comment="texlive-context-mathsets-2017.133.svn23167-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483552" comment="texlive-context-notes-zh-cn-2017.133.svn23171-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483553" comment="texlive-context-rst-2017.133.0.0.6csvn33092-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483554" comment="texlive-context-ruby-2017.133.svn28434-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483555" comment="texlive-context-simplefonts-2017.133.svn29229-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483556" comment="texlive-context-simpleslides-2017.133.svn34438-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483557" comment="texlive-context-title-2017.133.svn36189-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483558" comment="texlive-context-transliterator-2017.133.svn29801-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483559" comment="texlive-context-typearea-2017.133.svn23167-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483560" comment="texlive-context-typescripts-2017.133.svn25411-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483561" comment="texlive-context-vim-2017.133.svn37413-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483562" comment="texlive-context-visualcounter-2017.133.svn36190-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483563" comment="texlive-continue-2017.133.0.0.1svn39308-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483564" comment="texlive-contour-2017.133.2.14svn18950-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483565" comment="texlive-contracard-2017.133.1.0.1svn31745-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483566" comment="texlive-conv-xkv-2017.133.svn43558-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483567" comment="texlive-convbkmk-2017.133.0.0.10asvn35923-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486713" comment="texlive-convbkmk-bin-2017.20170520.svn30408-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483569" comment="texlive-cooking-2017.133.0.0.9bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483570" comment="texlive-cooking-units-2017.133.1.10svn42507-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483571" comment="texlive-cookingsymbols-2017.133.1.1svn35929-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483572" comment="texlive-cool-2017.133.1.35svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483573" comment="texlive-coollist-2017.133.1.4svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483574" comment="texlive-coolstr-2017.133.2.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483575" comment="texlive-coolthms-2017.133.1.2svn29062-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483576" comment="texlive-cooltooltips-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483577" comment="texlive-coordsys-2017.133.1.4svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483578" comment="texlive-copyedit-2017.133.1.6svn37928-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483579" comment="texlive-copyrightbox-2017.133.0.0.1svn24829-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483580" comment="texlive-cormorantgaramond-2017.133.3.00svn41865-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483581" comment="texlive-cormorantgaramond-fonts-2017.133.3.00svn41865-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483582" comment="texlive-correctmathalign-2017.133.1.1svn44131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483583" comment="texlive-coseoul-2017.133.1.1svn23862-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483584" comment="texlive-countriesofeurope-2017.133.0.0.21svn26042-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483585" comment="texlive-countriesofeurope-fonts-2017.133.0.0.21svn26042-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483586" comment="texlive-counttexruns-2017.133.1.00asvn27576-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483587" comment="texlive-courier-2017.133.svn35058-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483588" comment="texlive-courier-fonts-2017.133.svn35058-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483589" comment="texlive-courier-scaled-2017.133.svn24940-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483590" comment="texlive-courseoutline-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483591" comment="texlive-coursepaper-2017.133.2.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483592" comment="texlive-coverpage-2017.133.1.01svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483593" comment="texlive-covington-2017.133.1.4svn44501-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483594" comment="texlive-cprotect-2017.133.1.0esvn21209-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483595" comment="texlive-cquthesis-2017.133.1.20svn44476-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483596" comment="texlive-crbox-2017.133.0.0.1svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483597" comment="texlive-crimson-2017.133.svn43525-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483598" comment="texlive-crimson-fonts-2017.133.svn43525-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483599" comment="texlive-crop-2017.133.1.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483600" comment="texlive-crossreference-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483601" comment="texlive-crossrefware-2017.133.2.1asvn43993-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486714" comment="texlive-crossrefware-bin-2017.20170520.svn43866-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483603" comment="texlive-crossword-2017.133.1.9svn32657-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483604" comment="texlive-crosswrd-2017.133.3.0svn16896-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483605" comment="texlive-cryptocode-2017.133.0.0.1svn37019-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483606" comment="texlive-cryst-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483607" comment="texlive-cryst-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483608" comment="texlive-cs-2017.133.svn41553-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483609" comment="texlive-cs-fonts-2017.133.svn41553-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483610" comment="texlive-csbulletin-2017.133.1.1svn43277-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483611" comment="texlive-cslatex-2017.133.svn40855-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486715" comment="texlive-cslatex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483613" comment="texlive-csplain-2017.133.svn44321-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486716" comment="texlive-csplain-bin-2017.20170520.svn33902-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483615" comment="texlive-csquotes-2017.133.5.2bsvn43469-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483616" comment="texlive-csquotes-de-2017.133.1.01svn23371-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483617" comment="texlive-css-colors-2017.133.1.02svn43961-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483618" comment="texlive-cstex-2017.133.svn41301-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483619" comment="texlive-cstypo-2017.133.0.0.03svn41986-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483620" comment="texlive-csvsimple-2017.133.1.20svn41597-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483621" comment="texlive-ctable-2017.133.1.31svn38672-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483622" comment="texlive-ctablestack-2017.133.1.0svn38514-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483623" comment="texlive-ctan_chk-2017.133.1.0svn36304-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483624" comment="texlive-ctanify-2017.133.1.9.1svn44129-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486717" comment="texlive-ctanify-bin-2017.20170520.svn24061-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483626" comment="texlive-ctanupload-2017.133.1.2csvn26313-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486718" comment="texlive-ctanupload-bin-2017.20170520.svn23866-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483628" comment="texlive-ctex-2017.133.2.4.9svn43669-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483629" comment="texlive-ctex-faq-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483630" comment="texlive-ctib-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483631" comment="texlive-ctie-2017.133.1.1svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486719" comment="texlive-ctie-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483633" comment="texlive-cuisine-2017.133.0.0.7svn34453-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483634" comment="texlive-currency-2017.133.0.0.1svn44489-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483635" comment="texlive-currfile-2017.133.0.0.7csvn40725-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483636" comment="texlive-currvita-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483637" comment="texlive-cursolatex-2017.133.svn24139-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483638" comment="texlive-curve-2017.133.1.16svn20745-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483639" comment="texlive-curve2e-2017.133.1.60svn37839-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483640" comment="texlive-curves-2017.133.1.53svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483641" comment="texlive-custom-bib-2017.133.4.33svn24729-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483642" comment="texlive-cutwin-2017.133.0.0.1svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483643" comment="texlive-cv-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483644" comment="texlive-cv4tw-2017.133.0.0.2svn34577-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483645" comment="texlive-cweb-2017.133.3.64bsvn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486720" comment="texlive-cweb-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483647" comment="texlive-cweb-latex-2017.133.svn28878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483648" comment="texlive-cyber-2017.133.2.1svn37658-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483649" comment="texlive-cybercic-2017.133.2.1svn37659-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483650" comment="texlive-cyklop-2017.133.0.0.915svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483651" comment="texlive-cyklop-fonts-2017.133.0.0.915svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483652" comment="texlive-cyrillic-2017.133.svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483653" comment="texlive-cyrillic-bin-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486721" comment="texlive-cyrillic-bin-bin-2017.20170520.svn29741-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483655" comment="texlive-cyrplain-2017.133.svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483656" comment="texlive-dad-2017.133.1.1svn35362-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483657" comment="texlive-dad-fonts-2017.133.1.1svn35362-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483658" comment="texlive-dancers-2017.133.svn13293-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483659" comment="texlive-dantelogo-2017.133.0.0.03svn38599-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483660" comment="texlive-dantelogo-fonts-2017.133.0.0.03svn38599-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483661" comment="texlive-dashbox-2017.133.1.14svn23425-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483662" comment="texlive-dashrule-2017.133.1.3svn29579-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483663" comment="texlive-dashundergaps-2017.133.1.2svn23373-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483664" comment="texlive-dataref-2017.133.0.0.6svn42883-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483665" comment="texlive-datatool-2017.133.2.27svn41772-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483666" comment="texlive-dateiliste-2017.133.0.0.6svn27974-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483667" comment="texlive-datenumber-2017.133.0.0.02svn18951-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483668" comment="texlive-datetime-2017.133.2.60svn36650-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483669" comment="texlive-datetime2-2017.133.1.5.2svn41686-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483670" comment="texlive-datetime2-bahasai-2017.133.1.0svn36682-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483671" comment="texlive-datetime2-basque-2017.133.1.2svn38287-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483672" comment="texlive-datetime2-breton-2017.133.1.0svn36682-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483673" comment="texlive-datetime2-bulgarian-2017.133.1.0svn36682-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483674" comment="texlive-datetime2-catalan-2017.133.1.0svn36682-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483675" comment="texlive-datetime2-croatian-2017.133.1.0svn36682-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483676" comment="texlive-datetime2-czech-2017.133.1.0svn36682-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483677" comment="texlive-datetime2-danish-2017.133.1.0svn36682-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483678" comment="texlive-datetime2-dutch-2017.133.1.0svn36682-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483679" comment="texlive-datetime2-en-fulltext-2017.133.1.0svn36705-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483680" comment="texlive-datetime2-english-2017.133.1.04svn39991-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483681" comment="texlive-datetime2-esperanto-2017.133.1.0svn36682-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483682" comment="texlive-datetime2-estonian-2017.133.1.0svn36682-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483683" comment="texlive-datetime2-finnish-2017.133.1.1svn40237-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483684" comment="texlive-datetime2-french-2017.133.1.02svn43742-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483685" comment="texlive-datetime2-galician-2017.133.1.0svn36692-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483686" comment="texlive-datetime2-german-2017.133.1.1svn43452-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483687" comment="texlive-datetime2-greek-2017.133.1.0svn36692-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483688" comment="texlive-datetime2-hebrew-2017.133.1.0svn36692-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483689" comment="texlive-datetime2-icelandic-2017.133.1.0svn36692-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483690" comment="texlive-datetime2-irish-2017.133.1.0svn36635-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483691" comment="texlive-datetime2-it-fulltext-2017.133.1.6svn38093-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483692" comment="texlive-datetime2-italian-2017.133.1.3svn37146-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483693" comment="texlive-datetime2-latin-2017.133.1.0svn36692-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483694" comment="texlive-datetime2-lsorbian-2017.133.1.0svn36692-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483695" comment="texlive-datetime2-magyar-2017.133.1.0svn36692-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483696" comment="texlive-datetime2-norsk-2017.133.1.0svn36692-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483697" comment="texlive-datetime2-polish-2017.133.1.0svn36692-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483698" comment="texlive-datetime2-portuges-2017.133.1.0svn36670-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483699" comment="texlive-datetime2-romanian-2017.133.1.01svn43743-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483700" comment="texlive-datetime2-russian-2017.133.1.0svn36692-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483701" comment="texlive-datetime2-samin-2017.133.1.0svn36692-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483702" comment="texlive-datetime2-scottish-2017.133.1.0svn36625-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483703" comment="texlive-datetime2-serbian-2017.133.1.0svn36699-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483704" comment="texlive-datetime2-slovak-2017.133.1.0svn36700-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483705" comment="texlive-datetime2-slovene-2017.133.1.0svn36700-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483706" comment="texlive-datetime2-spanish-2017.133.1.0svn36661-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483707" comment="texlive-datetime2-swedish-2017.133.1.0svn36700-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483708" comment="texlive-datetime2-turkish-2017.133.1.0svn36700-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483709" comment="texlive-datetime2-ukrainian-2017.133.1.1svn44562-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483710" comment="texlive-datetime2-usorbian-2017.133.1.0svn36700-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483711" comment="texlive-datetime2-welsh-2017.133.1.0svn36636-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483712" comment="texlive-dblfloatfix-2017.133.1.0asvn28983-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483713" comment="texlive-dccpaper-2017.133.1.5svn41804-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483714" comment="texlive-dcpic-2017.133.5.0.0svn30206-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483715" comment="texlive-de-macro-2017.133.1.3svn26355-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486722" comment="texlive-de-macro-bin-2017.20170520.svn17399-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483717" comment="texlive-decimal-2017.133.svn23374-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483718" comment="texlive-decorule-2017.133.0.0.6svn23487-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483719" comment="texlive-dehyph-exptl-2017.133.0.0.41svn43666-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483720" comment="texlive-dejavu-2017.133.2.34svn31771-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483721" comment="texlive-dejavu-fonts-2017.133.2.34svn31771-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483722" comment="texlive-delim-2017.133.1.0svn23974-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483723" comment="texlive-delimseasy-2017.133.2.0svn39589-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483724" comment="texlive-delimset-2017.133.1.0svn42415-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483725" comment="texlive-delimtxt-2017.133.svn16549-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483726" comment="texlive-denisbdoc-2017.133.0.0.7svn42829-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483727" comment="texlive-detex-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486723" comment="texlive-detex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483729" comment="texlive-dhua-2017.133.0.0.11svn24035-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483730" comment="texlive-diadia-2017.133.1.1svn37656-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486724" comment="texlive-diadia-bin-2017.20170520.svn37645-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483732" comment="texlive-diagbox-2017.133.2.2svn42843-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483733" comment="texlive-diagmac2-2017.133.2.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483734" comment="texlive-diagnose-2017.133.0.0.2svn19387-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483735" comment="texlive-dialogl-2017.133.svn28946-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483736" comment="texlive-dice-2017.133.svn28501-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483737" comment="texlive-dichokey-2017.133.svn17192-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483738" comment="texlive-dickimaw-2017.133.svn32925-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483739" comment="texlive-dictsym-2017.133.svn20031-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483740" comment="texlive-dictsym-fonts-2017.133.svn20031-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483741" comment="texlive-diffcoeff-2017.133.1.0svn41554-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483742" comment="texlive-digiconfigs-2017.133.0.0.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483743" comment="texlive-din1505-2017.133.svn19441-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483744" comment="texlive-dinat-2017.133.2.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483745" comment="texlive-dinbrief-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483746" comment="texlive-dingbat-2017.133.1.0svn27918-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483747" comment="texlive-directory-2017.133.1.20svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483748" comment="texlive-dirtree-2017.133.0.0.32svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483749" comment="texlive-dirtytalk-2017.133.1.0svn20520-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483750" comment="texlive-disser-2017.133.1.5.0svn43417-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483751" comment="texlive-dithesis-2017.133.0.0.2svn34295-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483752" comment="texlive-dk-bib-2017.133.0.0.6svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483753" comment="texlive-dlfltxb-2017.133.svn17337-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483754" comment="texlive-dnaseq-2017.133.0.0.01svn17194-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483755" comment="texlive-dnp-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483756" comment="texlive-doc-pictex-2017.133.svn24927-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483757" comment="texlive-docbytex-2017.133.svn34294-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483758" comment="texlive-doclicense-2017.133.1.5.0svn40723-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483759" comment="texlive-docmfp-2017.133.1.2dsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483760" comment="texlive-docmute-2017.133.1.4svn25741-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483761" comment="texlive-docsurvey-2017.133.svn44131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483762" comment="texlive-doctools-2017.133.0.0.1svn34474-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483763" comment="texlive-documentation-2017.133.0.0.1svn34521-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483764" comment="texlive-doi-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483765" comment="texlive-doipubmed-2017.133.1.01svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483766" comment="texlive-dosepsbin-2017.133.1.2svn29752-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486725" comment="texlive-dosepsbin-bin-2017.20170520.svn24759-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483768" comment="texlive-dot2texi-2017.133.3.0svn26237-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483769" comment="texlive-dotarrow-2017.133.0.0.01asvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483770" comment="texlive-dotseqn-2017.133.1.1svn17195-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483771" comment="texlive-dottex-2017.133.0.0.6svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483772" comment="texlive-doublestroke-2017.133.1.111svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483773" comment="texlive-doublestroke-fonts-2017.133.1.111svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483774" comment="texlive-dowith-2017.133.r0.32svn38860-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483775" comment="texlive-download-2017.133.1.1svn30695-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483776" comment="texlive-dox-2017.133.2.3svn43060-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483777" comment="texlive-dozenal-2017.133.7.0svn42608-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483778" comment="texlive-dozenal-fonts-2017.133.7.0svn42608-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483779" comment="texlive-dpfloat-2017.133.svn17196-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483780" comment="texlive-dprogress-2017.133.0.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483781" comment="texlive-drac-2017.133.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483782" comment="texlive-draftcopy-2017.133.2.16svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483783" comment="texlive-draftfigure-2017.133.0.0.1svn44269-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483784" comment="texlive-draftwatermark-2017.133.1.2svn37498-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483785" comment="texlive-dramatist-2017.133.1.2esvn35866-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483786" comment="texlive-dratex-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483787" comment="texlive-drawmatrix-2017.133.1.5.0svn44471-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483788" comment="texlive-drawstack-2017.133.svn28582-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483789" comment="texlive-drm-2017.133.4.4svn38157-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483790" comment="texlive-drm-fonts-2017.133.4.4svn38157-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483791" comment="texlive-droid-2017.133.2.1svn23912-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483792" comment="texlive-droid-fonts-2017.133.2.1svn23912-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483793" comment="texlive-droit-fr-2017.133.1.2svn39802-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483794" comment="texlive-drs-2017.133.1.1bsvn19232-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483795" comment="texlive-drv-2017.133.0.0.97svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483796" comment="texlive-dsptricks-2017.133.1.0svn34724-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483797" comment="texlive-dtk-2017.133.2.07asvn44524-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483798" comment="texlive-dtl-2017.133.0.0.6.1svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486726" comment="texlive-dtl-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483800" comment="texlive-dtxdescribe-2017.133.0.0.10svn42661-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483801" comment="texlive-dtxgallery-2017.133.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483802" comment="texlive-dtxgen-2017.133.1.07svn38419-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486727" comment="texlive-dtxgen-bin-2017.20170520.svn29031-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483804" comment="texlive-dtxtut-2017.133.2.1svn38375-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483805" comment="texlive-duerer-2017.133.svn20741-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483806" comment="texlive-duerer-latex-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483807" comment="texlive-duotenzor-2017.133.1.00svn18728-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483808" comment="texlive-dutchcal-2017.133.1.0svn23448-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483809" comment="texlive-dutchcal-fonts-2017.133.1.0svn23448-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483810" comment="texlive-dvdcoll-2017.133.1.1asvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483811" comment="texlive-dvgloss-2017.133.0.0.1svn29103-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483812" comment="texlive-dviasm-2017.133.svn36814-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486728" comment="texlive-dviasm-bin-2017.20170520.svn8329-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483814" comment="texlive-dvicopy-2017.133.1.5svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486729" comment="texlive-dvicopy-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483816" comment="texlive-dvidvi-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486730" comment="texlive-dvidvi-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483818" comment="texlive-dviincl-2017.133.1.00svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483819" comment="texlive-dviinfox-2017.133.1.04svn44515-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486731" comment="texlive-dviinfox-bin-2017.20170520.svn44515-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483821" comment="texlive-dviljk-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486732" comment="texlive-dviljk-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483823" comment="texlive-dvipdfmx-2017.133.svn44224-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486733" comment="texlive-dvipdfmx-bin-2017.20170520.svn40273-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483825" comment="texlive-dvipng-2017.133.1.15svn44167-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486734" comment="texlive-dvipng-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483827" comment="texlive-dvipos-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486735" comment="texlive-dvipos-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483829" comment="texlive-dvips-2017.133.svn44167-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486736" comment="texlive-dvips-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483831" comment="texlive-dvipsconfig-2017.133.1.6svn13293-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483832" comment="texlive-dvisvgm-2017.133.2.1.3svn40768-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486737" comment="texlive-dvisvgm-bin-2017.20170520.svn40987-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483834" comment="texlive-dynamicnumber-2017.133.0.0.1.3svn38726-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483835" comment="texlive-dynblocks-2017.133.0.0.2bsvn35193-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483836" comment="texlive-dyntree-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483837" comment="texlive-e-french-2017.133.6.0svn38742-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483838" comment="texlive-ean-2017.133.svn20851-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483839" comment="texlive-ean13isbn-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483840" comment="texlive-easy-2017.133.0.0.99svn19440-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483841" comment="texlive-easy-todo-2017.133.svn32677-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483842" comment="texlive-easyfig-2017.133.1.2svn26424-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483843" comment="texlive-easyformat-2017.133.1.4.0svn44543-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483844" comment="texlive-easylist-2017.133.1.3svn32661-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483845" comment="texlive-easyreview-2017.133.1.0svn38352-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483846" comment="texlive-ebezier-2017.133.4svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483847" comment="texlive-ebgaramond-2017.133.0.0.16svn35662-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483848" comment="texlive-ebgaramond-fonts-2017.133.0.0.16svn35662-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483849" comment="texlive-ebgaramond-maths-2017.133.1.1svn35701-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483850" comment="texlive-ebong-2017.133.svn26313-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486738" comment="texlive-ebong-bin-2017.20170520.svn21000-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483852" comment="texlive-ebook-2017.133.svn29466-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483853" comment="texlive-ebproof-2017.133.2.0svn44392-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483854" comment="texlive-ebsthesis-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483855" comment="texlive-ec-2017.133.1.0svn25033-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483856" comment="texlive-ecc-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483857" comment="texlive-ecclesiastic-2017.133.0.0.3svn38172-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483858" comment="texlive-ecgdraw-2017.133.0.0.1svn41617-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483859" comment="texlive-ecltree-2017.133.1.1asvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483860" comment="texlive-eco-2017.133.1.3svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483861" comment="texlive-ecobiblatex-2017.133.1.0svn39233-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483862" comment="texlive-econometrics-2017.133.1.0svn39396-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483863" comment="texlive-economic-2017.133.svn32639-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483864" comment="texlive-ecv-2017.133.0.0.3svn24928-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483865" comment="texlive-ed-2017.133.1.8svn25231-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483866" comment="texlive-edfnotes-2017.133.0.0.6bsvn21540-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483867" comment="texlive-edmac-2017.133.3.17svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483868" comment="texlive-edmargin-2017.133.1.2svn27599-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483869" comment="texlive-ednotes-2017.133.1.3asvn35829-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483870" comment="texlive-eemeir-2017.133.1.1bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483871" comment="texlive-eepic-2017.133.1.1esvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483872" comment="texlive-efbox-2017.133.1.0svn33236-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483873" comment="texlive-egameps-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483874" comment="texlive-egplot-2017.133.1.02asvn20617-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483875" comment="texlive-eiad-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483876" comment="texlive-eiad-ltx-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483877" comment="texlive-eijkhout-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483878" comment="texlive-einfuehrung-2017.133.svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483879" comment="texlive-einfuehrung2-2017.133.svn39153-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483880" comment="texlive-ejpecp-2017.133.1.5svn42003-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483881" comment="texlive-ekaia-2017.133.1.04svn42578-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483882" comment="texlive-elbioimp-2017.133.1.2svn21758-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483883" comment="texlive-electrum-2017.133.1.005_bsvn19705-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483884" comment="texlive-electrum-fonts-2017.133.1.005_bsvn19705-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483885" comment="texlive-eledform-2017.133.1.1asvn38114-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483886" comment="texlive-eledmac-2017.133.1.24.11svn38639-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483887" comment="texlive-elements-2017.133.0.0.2svn41161-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483888" comment="texlive-ellipse-2017.133.1.0svn39025-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483889" comment="texlive-ellipsis-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483890" comment="texlive-elmath-2017.133.1.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483891" comment="texlive-elocalloc-2017.133.0.0.03svn42712-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483892" comment="texlive-elpres-2017.133.0.0.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483893" comment="texlive-elsarticle-2017.133.1.20svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483894" comment="texlive-elteikthesis-2017.133.1.2svn22513-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483895" comment="texlive-eltex-2017.133.2.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483896" comment="texlive-elvish-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483897" comment="texlive-elzcards-2017.133.1.20svn37063-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483898" comment="texlive-emarks-2017.133.1.0svn24504-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483899" comment="texlive-embedall-2017.133.1.0svn31903-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483900" comment="texlive-embrac-2017.133.0.0.6dsvn39334-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483901" comment="texlive-emf-2017.133.1svn42023-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483902" comment="texlive-emisa-2017.133.2.1.1svn41731-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483903" comment="texlive-emp-2017.133.svn23483-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483904" comment="texlive-emptypage-2017.133.1.2svn18064-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483905" comment="texlive-emulateapj-2017.133.svn28469-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483906" comment="texlive-enctex-2017.133.svn34957-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483907" comment="texlive-encxvlna-2017.133.1.1svn34087-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483908" comment="texlive-endfloat-2017.133.2.5dsvn24962-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483909" comment="texlive-endheads-2017.133.1.6svn43750-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483910" comment="texlive-endiagram-2017.133.0.0.1dsvn34486-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483911" comment="texlive-endnotes-2017.133.svn17197-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483912" comment="texlive-engpron-2017.133.2svn16558-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483913" comment="texlive-engrec-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483914" comment="texlive-engtlc-2017.133.3.2svn28571-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483915" comment="texlive-enigma-2017.133.0.0.1svn29802-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483916" comment="texlive-enotez-2017.133.0.0.9asvn44024-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483917" comment="texlive-enumitem-2017.133.3.5.2svn24146-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483918" comment="texlive-enumitem-zref-2017.133.1.8svn21472-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483919" comment="texlive-envbig-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483920" comment="texlive-environ-2017.133.0.0.3svn33821-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483921" comment="texlive-envlab-2017.133.1.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483922" comment="texlive-epigrafica-2017.133.1.01svn17210-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483923" comment="texlive-epigrafica-fonts-2017.133.1.01svn17210-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483924" comment="texlive-epigram-2017.133.svn20513-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483925" comment="texlive-epigraph-2017.133.1.5csvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483926" comment="texlive-epiolmec-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483927" comment="texlive-epiolmec-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483928" comment="texlive-eplain-2017.133.3.8svn41154-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486739" comment="texlive-eplain-bin-2017.20170520.svn3006-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483930" comment="texlive-epsdice-2017.133.2.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483931" comment="texlive-epsf-2017.133.2.7.4svn21461-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483932" comment="texlive-epsf-dvipdfmx-2017.133.2014svn35575-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483933" comment="texlive-epsincl-2017.133.0.0.2svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483934" comment="texlive-epslatex-fr-2017.133.svn19440-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483935" comment="texlive-epspdf-2017.133.0.0.6.3svn40917-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486740" comment="texlive-epspdf-bin-2017.20170520.svn29050-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483937" comment="texlive-epspdfconversion-2017.133.0.0.61svn18703-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483938" comment="texlive-epstopdf-2017.133.2.26svn42905-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486741" comment="texlive-epstopdf-bin-2017.20170520.svn18336-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483940" comment="texlive-eqell-2017.133.svn22931-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483941" comment="texlive-eqlist-2017.133.2.1svn32257-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483942" comment="texlive-eqnalign-2017.133.1.0asvn43278-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483943" comment="texlive-eqname-2017.133.svn20678-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483944" comment="texlive-eqnarray-2017.133.1.3svn20641-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483945" comment="texlive-eqparbox-2017.133.4.0svn29419-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483946" comment="texlive-erdc-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483947" comment="texlive-erewhon-2017.133.1.08svn43506-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483948" comment="texlive-erewhon-fonts-2017.133.1.08svn43506-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483949" comment="texlive-errata-2017.133.0.0.3svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483950" comment="texlive-es-tex-faq-2017.133.1.97svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483951" comment="texlive-esami-2017.133.2.1svn41774-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483952" comment="texlive-esdiff-2017.133.1.2svn21385-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483953" comment="texlive-esint-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483954" comment="texlive-esint-type1-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483955" comment="texlive-esint-type1-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483956" comment="texlive-esk-2017.133.1.0svn18115-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483957" comment="texlive-eskd-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483958" comment="texlive-eskdx-2017.133.0.0.98svn29235-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483959" comment="texlive-eso-pic-2017.133.2.0gsvn37925-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483960" comment="texlive-esrelation-2017.133.svn37236-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483961" comment="texlive-esrelation-fonts-2017.133.svn37236-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483962" comment="texlive-esstix-2017.133.1.0svn22426-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483963" comment="texlive-esstix-fonts-2017.133.1.0svn22426-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483964" comment="texlive-estcpmm-2017.133.0.0.4svn17335-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483965" comment="texlive-esvect-2017.133.1.3svn32098-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483966" comment="texlive-esvect-fonts-2017.133.1.3svn32098-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483967" comment="texlive-etaremune-2017.133.1.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483968" comment="texlive-etdipa-2017.133.2.6svn36354-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483969" comment="texlive-etex-2017.133.svn37057-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483970" comment="texlive-etex-pkg-2017.133.2.7svn41784-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483971" comment="texlive-etextools-2017.133.3.1415926svn20694-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483972" comment="texlive-ethiop-2017.133.0.0.7svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483973" comment="texlive-ethiop-t1-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483974" comment="texlive-ethiop-t1-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483975" comment="texlive-etoc-2017.133.1.08isvn42182-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483976" comment="texlive-etoolbox-2017.133.2.4svn42855-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483977" comment="texlive-etoolbox-de-2017.133.1svn21906-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483978" comment="texlive-euenc-2017.133.0.0.1hsvn19795-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483979" comment="texlive-eukdate-2017.133.1.04svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483980" comment="texlive-euler-2017.133.2.5svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483981" comment="texlive-eulerpx-2017.133.0.0.2.1svn43735-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483982" comment="texlive-eulervm-2017.133.4.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483983" comment="texlive-euro-2017.133.1.1svn22191-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483984" comment="texlive-euro-ce-2017.133.3.0bsvn25714-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483985" comment="texlive-europasscv-2017.133.svn43033-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483986" comment="texlive-europecv-2017.133.svn34454-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483987" comment="texlive-eurosym-2017.133.1.4_subrfixsvn17265-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483988" comment="texlive-eurosym-fonts-2017.133.1.4_subrfixsvn17265-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483989" comment="texlive-euxm-2017.133.svn20202-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483990" comment="texlive-everyhook-2017.133.1.2svn35675-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483991" comment="texlive-everypage-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483992" comment="texlive-exam-2017.133.2.5svn37279-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483993" comment="texlive-exam-n-2017.133.1.1.4svn42755-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483994" comment="texlive-examdesign-2017.133.1.101svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483995" comment="texlive-example-2017.133.svn33398-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483996" comment="texlive-examplep-2017.133.0.0.04svn16916-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483997" comment="texlive-exceltex-2017.133.0.0.5.1svn26313-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486742" comment="texlive-exceltex-bin-2017.20170520.svn25860-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009483999" comment="texlive-excludeonly-2017.133.1.0svn17262-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484000" comment="texlive-exercise-2017.133.1.6svn35417-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484001" comment="texlive-exercises-2017.133.1.0svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484002" comment="texlive-exp-testopt-2017.133.0.0.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484003" comment="texlive-expdlist-2017.133.2.4svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484004" comment="texlive-expex-2017.133.5.1bsvn44499-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484005" comment="texlive-export-2017.133.1.8svn27206-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484006" comment="texlive-expressg-2017.133.1.5svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484007" comment="texlive-exsheets-2017.133.0.0.21isvn43188-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484008" comment="texlive-exsol-2017.133.1.2svn41377-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484009" comment="texlive-extarrows-2017.133.1.0bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484010" comment="texlive-exteps-2017.133.0.0.41svn19859-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484011" comment="texlive-extpfeil-2017.133.0.0.4svn16243-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484012" comment="texlive-extract-2017.133.1.8svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484013" comment="texlive-extsizes-2017.133.1.4asvn17263-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484014" comment="texlive-facsimile-2017.133.1.0svn21328-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484015" comment="texlive-factura-2017.133.3.00svn43470-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484016" comment="texlive-facture-2017.133.1.2.2svn43865-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484017" comment="texlive-faktor-2017.133.0.0.1bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484018" comment="texlive-fancybox-2017.133.1.4svn18304-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484019" comment="texlive-fancyhdr-2017.133.3.9svn44479-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484020" comment="texlive-fancyhdr-it-2017.133.svn21912-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484021" comment="texlive-fancylabel-2017.133.1.0svn34684-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484022" comment="texlive-fancynum-2017.133.0.0.92svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484023" comment="texlive-fancypar-2017.133.1.1svn18018-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484024" comment="texlive-fancyref-2017.133.0.0.9csvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484025" comment="texlive-fancyslides-2017.133.1.0svn36263-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484026" comment="texlive-fancytabs-2017.133.1.9svn41549-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484027" comment="texlive-fancytooltips-2017.133.1.8svn27129-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484028" comment="texlive-fancyvrb-2017.133.2.8svn18492-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484029" comment="texlive-fandol-2017.133.0.0.3svn37889-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484030" comment="texlive-fandol-fonts-2017.133.0.0.3svn37889-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484031" comment="texlive-fast-diagram-2017.133.1.1svn29264-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484032" comment="texlive-fbb-2017.133.1.12svn43464-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484033" comment="texlive-fbb-fonts-2017.133.1.12svn43464-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484034" comment="texlive-fbithesis-2017.133.1.2msvn21340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484035" comment="texlive-fbs-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484036" comment="texlive-fc-2017.133.1.4svn32796-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484037" comment="texlive-fcavtex-2017.133.1.1svn38074-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484038" comment="texlive-fcltxdoc-2017.133.1.0svn24500-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484039" comment="texlive-fcolumn-2017.133.1.1.1svn38489-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484040" comment="texlive-fdsymbol-2017.133.0.0.8svn26722-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484041" comment="texlive-fdsymbol-fonts-2017.133.0.0.8svn26722-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484042" comment="texlive-featpost-2017.133.0.0.8.8svn35346-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484043" comment="texlive-fei-2017.133.3.0.6svn43630-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484044" comment="texlive-fenixpar-2017.133.0.0.92svn24730-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484045" comment="texlive-fetamont-2017.133.svn43812-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484046" comment="texlive-fetamont-fonts-2017.133.svn43812-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484047" comment="texlive-feupphdteses-2017.133.4.0svn30962-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484048" comment="texlive-feyn-2017.133.0.0.3.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484049" comment="texlive-feynmf-2017.133.1.08svn17259-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484050" comment="texlive-feynmp-auto-2017.133.1.1svn30223-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484051" comment="texlive-ffslides-2017.133.svn38895-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484052" comment="texlive-fge-2017.133.1.25svn37628-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484053" comment="texlive-fge-fonts-2017.133.1.25svn37628-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484054" comment="texlive-fgruler-2017.133.1.0svn42966-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484055" comment="texlive-fibeamer-2017.133.1.1.7svn44239-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484056" comment="texlive-fifinddo-info-2017.133.1.1bsvn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484057" comment="texlive-fifo-stack-2017.133.1.0svn33288-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484058" comment="texlive-fig4latex-2017.133.0.0.2svn26313-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486743" comment="texlive-fig4latex-bin-2017.20170520.svn14752-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484060" comment="texlive-figbas-2017.133.1.0.3svn28943-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484061" comment="texlive-figbas-fonts-2017.133.1.0.3svn28943-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484062" comment="texlive-figbib-2017.133.svn19388-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484063" comment="texlive-figflow-2017.133.svn21462-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484064" comment="texlive-figsize-2017.133.0.0.1svn18784-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484065" comment="texlive-filecontents-2017.133.1.3svn24250-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484066" comment="texlive-filecontentsdef-2017.133.1.2svn42107-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484067" comment="texlive-filedate-2017.133.svn29529-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484068" comment="texlive-filehook-2017.133.0.0.5dsvn24280-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484069" comment="texlive-fileinfo-2017.133.0.0.81asvn28421-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484070" comment="texlive-filemod-2017.133.1.2svn24042-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484071" comment="texlive-finbib-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484072" comment="texlive-findhyph-2017.133.3.4svn38674-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486744" comment="texlive-findhyph-bin-2017.20170520.svn14758-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484074" comment="texlive-fink-2017.133.2.2.1svn24329-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484075" comment="texlive-finstrut-2017.133.0.0.5svn21719-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484076" comment="texlive-fira-2017.133.4.2svn42501-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484077" comment="texlive-fira-fonts-2017.133.4.2svn42501-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484078" comment="texlive-first-latex-doc-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484079" comment="texlive-fitbox-2017.133.1.00svn38139-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484080" comment="texlive-fithesis-2017.133.0.0.3.46svn44472-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484081" comment="texlive-fix2col-2017.133.0.0.04svn38770-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484082" comment="texlive-fixcmex-2017.133.1.0svn38816-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484083" comment="texlive-fixfoot-2017.133.0.0.3asvn17131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484084" comment="texlive-fixlatvian-2017.133.1asvn21631-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484085" comment="texlive-fixltxhyph-2017.133.0.0.4svn25832-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484086" comment="texlive-fixme-2017.133.4.4svn43413-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484087" comment="texlive-fixmetodonotes-2017.133.0.0.2.2svn30168-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484088" comment="texlive-fixpdfmag-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484089" comment="texlive-fjodor-2017.133.svn20220-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484090" comment="texlive-flabels-2017.133.1.0svn17272-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484091" comment="texlive-flacards-2017.133.0.0.1.1bsvn19440-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484092" comment="texlive-flagderiv-2017.133.0.0.10svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484093" comment="texlive-flashcards-2017.133.1.0.1svn19667-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484094" comment="texlive-flashmovie-2017.133.0.0.4svn25768-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484095" comment="texlive-flipbook-2017.133.0.0.2svn25584-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484096" comment="texlive-flippdf-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484097" comment="texlive-float-2017.133.1.3dsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484098" comment="texlive-floatrow-2017.133.0.0.3bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484099" comment="texlive-flowchart-2017.133.3.3svn36572-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484100" comment="texlive-flowfram-2017.133.1.17svn35291-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484101" comment="texlive-fltpoint-2017.133.1.1bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484102" comment="texlive-fmp-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484103" comment="texlive-fmtcount-2017.133.3.01svn37298-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484104" comment="texlive-fn2end-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484105" comment="texlive-fnbreak-2017.133.1.30svn25003-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484106" comment="texlive-fncychap-2017.133.1.34svn20710-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484107" comment="texlive-fncylab-2017.133.1.0svn17382-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484108" comment="texlive-fnpara-2017.133.svn25607-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484109" comment="texlive-fnpct-2017.133.0.0.4esvn40535-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484110" comment="texlive-fnspe-2017.133.1.1bsvn43380-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484111" comment="texlive-fntproof-2017.133.svn20638-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484112" comment="texlive-fnumprint-2017.133.1.1asvn29173-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484113" comment="texlive-foekfont-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484114" comment="texlive-foekfont-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484115" comment="texlive-foilhtml-2017.133.1.2svn21855-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484116" comment="texlive-fonetika-2017.133.svn21326-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484117" comment="texlive-fonetika-fonts-2017.133.svn21326-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484118" comment="texlive-font-change-2017.133.2015.2svn40403-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484119" comment="texlive-font-change-xetex-2017.133.2016.1svn40404-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484120" comment="texlive-fontawesome-2017.133.4.6.3.2svn41412-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484121" comment="texlive-fontawesome-fonts-2017.133.4.6.3.2svn41412-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484122" comment="texlive-fontaxes-2017.133.1.0dsvn33276-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484123" comment="texlive-fontbook-2017.133.0.0.2svn23608-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484124" comment="texlive-fontch-2017.133.2.2svn17859-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484125" comment="texlive-fontinst-2017.133.1.933svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486745" comment="texlive-fontinst-bin-2017.20170520.svn29741-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484127" comment="texlive-fontmfizz-2017.133.svn43546-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484128" comment="texlive-fontmfizz-fonts-2017.133.svn43546-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484129" comment="texlive-fontname-2017.133.svn38345-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484130" comment="texlive-fontools-2017.133.svn43573-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486746" comment="texlive-fontools-bin-2017.20170520.svn25997-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484132" comment="texlive-fonts-churchslavonic-2017.133.1.1svn43121-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484133" comment="texlive-fonts-churchslavonic-fonts-2017.133.1.1svn43121-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484134" comment="texlive-fonts-tlwg-2017.133.0.0.6.3svn41366-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484135" comment="texlive-fonts-tlwg-fonts-2017.133.0.0.6.3svn41366-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484136" comment="texlive-fontspec-2017.133.2.6asvn43661-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484137" comment="texlive-fonttable-2017.133.1.6bsvn21399-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484138" comment="texlive-fontware-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486747" comment="texlive-fontware-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484140" comment="texlive-fontwrap-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484141" comment="texlive-footbib-2017.133.2.0.7svn17115-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484142" comment="texlive-footmisc-2017.133.5.5bsvn23330-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484143" comment="texlive-footmisx-2017.133.20161201svn42621-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484144" comment="texlive-footnotebackref-2017.133.1.0svn27034-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484145" comment="texlive-footnotehyper-2017.133.1.0svn43424-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484146" comment="texlive-footnoterange-2017.133.1.0asvn25430-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484147" comment="texlive-footnpag-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484148" comment="texlive-forarray-2017.133.1.01svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484149" comment="texlive-foreign-2017.133.2.7svn27819-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484150" comment="texlive-forest-2017.133.2.1.4svn43129-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484151" comment="texlive-forest-quickstart-2017.133.svn42503-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484152" comment="texlive-forloop-2017.133.3.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484153" comment="texlive-formation-latex-ul-2017.133.2016.11_3svn43005-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484154" comment="texlive-formlett-2017.133.2.3svn21480-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484155" comment="texlive-formular-2017.133.1.0asvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484156" comment="texlive-fouridx-2017.133.2.00svn32214-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484157" comment="texlive-fourier-2017.133.1.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484158" comment="texlive-fourier-fonts-2017.133.1.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484159" comment="texlive-fouriernc-2017.133.svn29646-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484160" comment="texlive-fp-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484161" comment="texlive-fpl-2017.133.1.002svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484162" comment="texlive-fpl-fonts-2017.133.1.002svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484163" comment="texlive-fragmaster-2017.133.1.6svn26313-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486748" comment="texlive-fragmaster-bin-2017.20170520.svn13663-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484165" comment="texlive-fragments-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484166" comment="texlive-frame-2017.133.1.0svn18312-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484167" comment="texlive-framed-2017.133.0.0.96svn26789-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484168" comment="texlive-francais-bst-2017.133.1.1svn38922-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484169" comment="texlive-frankenstein-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484170" comment="texlive-frcursive-2017.133.svn24559-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484171" comment="texlive-frcursive-fonts-2017.133.svn24559-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484172" comment="texlive-frederika2016-2017.133.1.000_2016_initial_releasesvn42157-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484173" comment="texlive-frederika2016-fonts-2017.133.1.000_2016_initial_releasesvn42157-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484174" comment="texlive-frege-2017.133.1.3svn27417-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484175" comment="texlive-frletter-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484176" comment="texlive-frontespizio-2017.133.1.4asvn24054-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484177" comment="texlive-ftcap-2017.133.1.4svn17275-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484178" comment="texlive-ftnxtra-2017.133.0.0.1svn29652-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484179" comment="texlive-fullblck-2017.133.1.03svn25434-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484180" comment="texlive-fullminipage-2017.133.0.0.1.1svn34545-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484181" comment="texlive-fullwidth-2017.133.0.0.1svn24684-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484182" comment="texlive-functan-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484183" comment="texlive-fundus-calligra-2017.133.1.2svn26018-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484184" comment="texlive-fundus-cyr-2017.133.svn26019-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484185" comment="texlive-fundus-sueterlin-2017.133.1.2svn26030-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484186" comment="texlive-fvextra-2017.133.1.2.1svn41984-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484187" comment="texlive-fwlw-2017.133.svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484188" comment="texlive-g-brief-2017.133.4.0.2svn21140-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484189" comment="texlive-gaceta-2017.133.1.06svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484190" comment="texlive-galois-2017.133.1.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484191" comment="texlive-gamebook-2017.133.1.0svn24714-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484192" comment="texlive-garrigues-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484193" comment="texlive-garuda-c90-2017.133.svn37677-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484194" comment="texlive-gastex-2017.133.2.8svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484195" comment="texlive-gatech-thesis-2017.133.1.8svn19886-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484196" comment="texlive-gates-2017.133.0.0.2svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484197" comment="texlive-gauss-2017.133.svn32934-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484198" comment="texlive-gb4e-2017.133.svn19216-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484199" comment="texlive-gcard-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484200" comment="texlive-gchords-2017.133.1.20svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484201" comment="texlive-gcite-2017.133.1.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484202" comment="texlive-gender-2017.133.1.0svn36464-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484203" comment="texlive-gene-logic-2017.133.1.4svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484204" comment="texlive-genealogy-2017.133.svn25112-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484205" comment="texlive-genealogytree-2017.133.1.10svn43086-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484206" comment="texlive-genmisc-2017.133.svn27208-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484207" comment="texlive-genmpage-2017.133.0.0.3.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484208" comment="texlive-gentium-tug-2017.133.1.1svn37378-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484209" comment="texlive-gentium-tug-fonts-2017.133.1.1svn37378-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484210" comment="texlive-gentle-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484211" comment="texlive-geometry-2017.133.5.6svn19716-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484212" comment="texlive-geometry-de-2017.133.1.1svn21882-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484213" comment="texlive-german-2017.133.2.5esvn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484214" comment="texlive-germbib-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484215" comment="texlive-germkorr-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484216" comment="texlive-geschichtsfrkl-2017.133.1.4svn42121-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484217" comment="texlive-getfiledate-2017.133.1.2svn16189-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484218" comment="texlive-getitems-2017.133.1.0svn39365-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484219" comment="texlive-getmap-2017.133.1.9svn41503-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486749" comment="texlive-getmap-bin-2017.20170520.svn34971-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484221" comment="texlive-getoptk-2017.133.1.0svn23567-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484222" comment="texlive-gfnotation-2017.133.2.9svn37156-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484223" comment="texlive-gfsartemisia-2017.133.1.0svn19469-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484224" comment="texlive-gfsartemisia-fonts-2017.133.1.0svn19469-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484225" comment="texlive-gfsbaskerville-2017.133.1.0svn19440-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484226" comment="texlive-gfsbaskerville-fonts-2017.133.1.0svn19440-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484227" comment="texlive-gfsbodoni-2017.133.1.01svn28484-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484228" comment="texlive-gfsbodoni-fonts-2017.133.1.01svn28484-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484229" comment="texlive-gfscomplutum-2017.133.1.0svn19469-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484230" comment="texlive-gfscomplutum-fonts-2017.133.1.0svn19469-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484231" comment="texlive-gfsdidot-2017.133.svn31978-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484232" comment="texlive-gfsdidot-fonts-2017.133.svn31978-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484233" comment="texlive-gfsneohellenic-2017.133.svn31979-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484234" comment="texlive-gfsneohellenic-fonts-2017.133.svn31979-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484235" comment="texlive-gfsporson-2017.133.1.01svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484236" comment="texlive-gfsporson-fonts-2017.133.1.01svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484237" comment="texlive-gfssolomos-2017.133.1.0svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484238" comment="texlive-gfssolomos-fonts-2017.133.1.0svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484239" comment="texlive-ghab-2017.133.0.0.5svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484240" comment="texlive-ghsystem-2017.133.4.8svn41714-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484241" comment="texlive-gillcm-2017.133.1.1svn19878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484242" comment="texlive-gillius-2017.133.svn32068-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484243" comment="texlive-gillius-fonts-2017.133.svn32068-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484244" comment="texlive-gincltex-2017.133.0.0.3svn23835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484245" comment="texlive-ginpenc-2017.133.1.0svn24980-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484246" comment="texlive-gitfile-info-2017.133.0.0.3svn41693-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484247" comment="texlive-gitinfo-2017.133.1.0svn34049-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484248" comment="texlive-gitinfo2-2017.133.2.0.7svn38913-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484249" comment="texlive-gitlog-2017.133.0.0.0.betasvn38932-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484250" comment="texlive-gloss-2017.133.1.5.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484251" comment="texlive-gloss-occitan-2017.133.0.0.1svn39609-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484252" comment="texlive-glossaries-2017.133.4.30svn44564-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486750" comment="texlive-glossaries-bin-2017.20170520.svn37813-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484254" comment="texlive-glossaries-danish-2017.133.1.0svn35665-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484255" comment="texlive-glossaries-dutch-2017.133.1.1svn35685-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484256" comment="texlive-glossaries-english-2017.133.1.0svn35665-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484257" comment="texlive-glossaries-extra-2017.133.1.15svn44284-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484258" comment="texlive-glossaries-french-2017.133.1.1svn42873-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484259" comment="texlive-glossaries-german-2017.133.1.0svn35665-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484260" comment="texlive-glossaries-irish-2017.133.1.0svn35665-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484261" comment="texlive-glossaries-italian-2017.133.1.0svn35665-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484262" comment="texlive-glossaries-magyar-2017.133.1.0svn35665-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484263" comment="texlive-glossaries-polish-2017.133.1.0svn35665-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484264" comment="texlive-glossaries-portuges-2017.133.1.1svn36064-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484265" comment="texlive-glossaries-serbian-2017.133.1.0svn35665-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484266" comment="texlive-glossaries-spanish-2017.133.1.0svn35665-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484267" comment="texlive-glyphlist-2017.133.svn41545-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484268" comment="texlive-gmdoc-2017.133.0.0.993svn21292-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484269" comment="texlive-gmdoc-enhance-2017.133.0.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484270" comment="texlive-gmiflink-2017.133.0.0.97svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484271" comment="texlive-gmp-2017.133.1.0svn21691-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484272" comment="texlive-gmutils-2017.133.0.0.996svn24287-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484273" comment="texlive-gmverb-2017.133.0.0.98svn24288-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484274" comment="texlive-gmverse-2017.133.0.0.73svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484275" comment="texlive-gnu-freefont-2017.133.svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484276" comment="texlive-gnu-freefont-fonts-2017.133.svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484277" comment="texlive-gnuplottex-2017.133.0.0.9.2svn41904-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484278" comment="texlive-go-2017.133.svn28628-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484279" comment="texlive-gobble-2017.133.0.0.1svn40936-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484280" comment="texlive-gofonts-2017.133.svn43726-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484281" comment="texlive-gofonts-fonts-2017.133.svn43726-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484282" comment="texlive-gost-2017.133.1.2isvn44131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484283" comment="texlive-gothic-2017.133.svn38263-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484284" comment="texlive-gotoh-2017.133.1.0svn44211-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484285" comment="texlive-gradientframe-2017.133.0.0.2svn21387-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484286" comment="texlive-gradstudentresume-2017.133.svn38832-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484287" comment="texlive-grafcet-2017.133.1.3.5svn22509-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484288" comment="texlive-grant-2017.133.0.0.0.3svn41905-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484289" comment="texlive-graphbox-2017.133.1.0svn35075-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484290" comment="texlive-graphics-2017.133.svn43813-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484291" comment="texlive-graphics-cfg-2017.133.svn41448-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484292" comment="texlive-graphics-def-2017.133.svn43025-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484293" comment="texlive-graphics-pln-2017.133.svn44567-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484294" comment="texlive-graphicx-psmin-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484295" comment="texlive-graphicxbox-2017.133.1.0svn32630-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484296" comment="texlive-graphviz-2017.133.0.0.94svn31517-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484297" comment="texlive-grayhints-2017.133.svn43561-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484298" comment="texlive-greek-fontenc-2017.133.0.0.13.2svn39606-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484299" comment="texlive-greek-inputenc-2017.133.1.6svn40613-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484300" comment="texlive-greekdates-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484301" comment="texlive-greektex-2017.133.svn28327-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484302" comment="texlive-greektonoi-2017.133.svn39419-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484303" comment="texlive-greenpoint-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484304" comment="texlive-gregoriotex-2017.133.5.0.2svn44502-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486751" comment="texlive-gregoriotex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484306" comment="texlive-gregoriotex-fonts-2017.133.5.0.2svn44502-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484307" comment="texlive-grfpaste-2017.133.0.0.2svn17354-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484308" comment="texlive-grid-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484309" comment="texlive-grid-system-2017.133.0.0.3.0svn32981-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484310" comment="texlive-gridset-2017.133.0.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484311" comment="texlive-grotesq-2017.133.svn35859-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484312" comment="texlive-grotesq-fonts-2017.133.svn35859-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484313" comment="texlive-grundgesetze-2017.133.1.02svn34439-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484314" comment="texlive-gsemthesis-2017.133.0.0.9.4svn36244-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484315" comment="texlive-gsftopk-2017.133.1.19.2svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486752" comment="texlive-gsftopk-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484317" comment="texlive-gtl-2017.133.0.0.2svn38503-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484318" comment="texlive-gtrcrd-2017.133.1.1svn32484-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484319" comment="texlive-gtrlib-largetrees-2017.133.svn43279-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484320" comment="texlive-gu-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484321" comment="texlive-guide-to-latex-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484322" comment="texlive-guitar-2017.133.1.6svn32258-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484323" comment="texlive-guitarchordschemes-2017.133.0.0.7svn41880-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484324" comment="texlive-guitlogo-2017.133.0.0.9.2svn27458-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484325" comment="texlive-gustlib-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484326" comment="texlive-gustprog-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484327" comment="texlive-gzt-2017.133.0.0.97svn43254-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484328" comment="texlive-h2020proposal-2017.133.1.0svn38428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484329" comment="texlive-hacm-2017.133.0.0.1svn27671-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484330" comment="texlive-hacm-fonts-2017.133.0.0.1svn27671-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484331" comment="texlive-halloweenmath-2017.133.0.0.10asvn44043-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484332" comment="texlive-handout-2017.133.1.6.0svn43962-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484333" comment="texlive-hands-2017.133.svn13293-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484334" comment="texlive-hang-2017.133.2.1svn43280-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484335" comment="texlive-hanging-2017.133.1.2bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484336" comment="texlive-hanoi-2017.133.20120101svn25019-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484337" comment="texlive-happy4th-2017.133.20120102svn25020-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484338" comment="texlive-har2nat-2017.133.1.0svn17356-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484339" comment="texlive-hardwrap-2017.133.0.0.2svn21396-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484340" comment="texlive-harmony-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484341" comment="texlive-harnon-cv-2017.133.1.0svn26543-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484342" comment="texlive-harpoon-2017.133.1.0svn21327-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484343" comment="texlive-harvard-2017.133.2.0.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484344" comment="texlive-harveyballs-2017.133.1.1svn32003-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484345" comment="texlive-harvmac-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484346" comment="texlive-hatching-2017.133.0.0.11svn23818-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484347" comment="texlive-hausarbeit-jura-2017.133.1.5svn42054-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484348" comment="texlive-havannah-2017.133.svn36348-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484349" comment="texlive-hc-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484350" comment="texlive-he-she-2017.133.1.3svn41359-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484351" comment="texlive-helvetic-2017.133.svn31835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484352" comment="texlive-helvetic-fonts-2017.133.svn31835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484353" comment="texlive-hep-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484354" comment="texlive-hepnames-2017.133.2.0svn35722-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484355" comment="texlive-hepparticles-2017.133.2.0svn35723-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484356" comment="texlive-hepthesis-2017.133.1.5.0svn35720-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484357" comment="texlive-hepunits-2017.133.1.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484358" comment="texlive-here-2017.133.svn16135-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484359" comment="texlive-heuristica-2017.133.1.09svn43507-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484360" comment="texlive-heuristica-fonts-2017.133.1.09svn43507-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484361" comment="texlive-hexgame-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484362" comment="texlive-hf-tikz-2017.133.0.0.3asvn34733-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484363" comment="texlive-hfbright-2017.133.svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484364" comment="texlive-hfbright-fonts-2017.133.svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484365" comment="texlive-hfoldsty-2017.133.1.15svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484366" comment="texlive-hhtensor-2017.133.0.0.61svn24981-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484367" comment="texlive-histogr-2017.133.1.01svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484368" comment="texlive-historische-zeitschrift-2017.133.1.2svn42635-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484369" comment="texlive-hitec-2017.133.0.0.0betasvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484370" comment="texlive-hletter-2017.133.4.2svn30002-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484371" comment="texlive-hlist-2017.133.0.0.1svn44158-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484372" comment="texlive-hobby-2017.133.1.8svn44474-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484373" comment="texlive-hobete-2017.133.svn27036-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484374" comment="texlive-hook-pre-commit-pkg-2017.133.1.1.2svn41378-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484375" comment="texlive-horoscop-2017.133.0.0.92svn30530-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484376" comment="texlive-hpsdiss-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484377" comment="texlive-hrefhide-2017.133.1.0fsvn22255-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484378" comment="texlive-hrlatex-2017.133.0.0.23svn18020-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484379" comment="texlive-hustthesis-2017.133.1.4svn42547-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484380" comment="texlive-hvfloat-2017.133.1.2svn43732-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484381" comment="texlive-hvindex-2017.133.0.0.02svn16136-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484382" comment="texlive-hypdvips-2017.133.3.02svn34364-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484383" comment="texlive-hyper-2017.133.4.2dsvn17357-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484384" comment="texlive-hypernat-2017.133.1.0bsvn17358-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484385" comment="texlive-hyperref-2017.133.6.85asvn43547-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484386" comment="texlive-hyperref-docsrc-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484387" comment="texlive-hyperxmp-2017.133.3.2svn43316-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484388" comment="texlive-hyph-utf8-2017.133.svn44401-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484389" comment="texlive-hyphen-afrikaans-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484390" comment="texlive-hyphen-ancientgreek-2017.133.svn41189-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484391" comment="texlive-hyphen-arabic-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484392" comment="texlive-hyphen-armenian-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484393" comment="texlive-hyphen-base-2017.133.svn44419-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484394" comment="texlive-hyphen-basque-2017.133.svn41113-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484395" comment="texlive-hyphen-belarusian-2017.133.svn44401-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484396" comment="texlive-hyphen-bulgarian-2017.133.svn41113-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484397" comment="texlive-hyphen-catalan-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484398" comment="texlive-hyphen-chinese-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484399" comment="texlive-hyphen-churchslavonic-2017.133.svn44401-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484400" comment="texlive-hyphen-coptic-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484401" comment="texlive-hyphen-croatian-2017.133.svn41113-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484402" comment="texlive-hyphen-czech-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484403" comment="texlive-hyphen-danish-2017.133.svn41113-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484404" comment="texlive-hyphen-dutch-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484405" comment="texlive-hyphen-english-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484406" comment="texlive-hyphen-esperanto-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484407" comment="texlive-hyphen-estonian-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484408" comment="texlive-hyphen-ethiopic-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484409" comment="texlive-hyphen-farsi-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484410" comment="texlive-hyphen-finnish-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484411" comment="texlive-hyphen-french-2017.133.svn41113-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484412" comment="texlive-hyphen-friulan-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484413" comment="texlive-hyphen-galician-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484414" comment="texlive-hyphen-georgian-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484415" comment="texlive-hyphen-german-2017.133.svn44401-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484416" comment="texlive-hyphen-greek-2017.133.5svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484417" comment="texlive-hyphen-hungarian-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484418" comment="texlive-hyphen-icelandic-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484419" comment="texlive-hyphen-indic-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484420" comment="texlive-hyphen-indonesian-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484421" comment="texlive-hyphen-interlingua-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484422" comment="texlive-hyphen-irish-2017.133.svn41113-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484423" comment="texlive-hyphen-italian-2017.133.4.8gsvn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484424" comment="texlive-hyphen-kurmanji-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484425" comment="texlive-hyphen-latin-2017.133.3.1svn44401-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484426" comment="texlive-hyphen-latvian-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484427" comment="texlive-hyphen-lithuanian-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484428" comment="texlive-hyphen-mongolian-2017.133.svn41113-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484429" comment="texlive-hyphen-norwegian-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484430" comment="texlive-hyphen-occitan-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484431" comment="texlive-hyphen-piedmontese-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484432" comment="texlive-hyphen-polish-2017.133.3.0asvn41113-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484433" comment="texlive-hyphen-portuguese-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484434" comment="texlive-hyphen-romanian-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484435" comment="texlive-hyphen-romansh-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484436" comment="texlive-hyphen-russian-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484437" comment="texlive-hyphen-sanskrit-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484438" comment="texlive-hyphen-serbian-2017.133.1.0asvn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484439" comment="texlive-hyphen-slovak-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484440" comment="texlive-hyphen-slovenian-2017.133.svn41113-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484441" comment="texlive-hyphen-spanish-2017.133.4.5svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484442" comment="texlive-hyphen-swedish-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484443" comment="texlive-hyphen-thai-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484444" comment="texlive-hyphen-turkish-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484445" comment="texlive-hyphen-turkmen-2017.133.svn41113-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484446" comment="texlive-hyphen-ukrainian-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484447" comment="texlive-hyphen-uppersorbian-2017.133.svn40340-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484448" comment="texlive-hyphen-welsh-2017.133.svn41113-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484449" comment="texlive-hyphenat-2017.133.2.3csvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484450" comment="texlive-hyphenex-2017.133.svn37354-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484451" comment="texlive-hyplain-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484452" comment="texlive-ibycus-babel-2017.133.3.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484453" comment="texlive-ibygrk-2017.133.4.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484454" comment="texlive-ibygrk-fonts-2017.133.4.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484455" comment="texlive-icsv-2017.133.0.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484456" comment="texlive-idxcmds-2017.133.0.0.2csvn38115-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484457" comment="texlive-idxlayout-2017.133.0.0.4dsvn25821-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484458" comment="texlive-ieeepes-2017.133.4.0svn17359-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484459" comment="texlive-ietfbibs-2017.133.1.0.0svn41332-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484460" comment="texlive-ifetex-2017.133.1.2svn24853-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484461" comment="texlive-iffont-2017.133.1.0.0svn38823-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484462" comment="texlive-ifluatex-2017.133.1.4svn43610-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484463" comment="texlive-ifmslide-2017.133.0.0.47svn20727-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484464" comment="texlive-ifmtarg-2017.133.1.2asvn19363-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484465" comment="texlive-ifnextok-2017.133.0.0.3svn23379-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484466" comment="texlive-ifoddpage-2017.133.1.1svn40726-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484467" comment="texlive-ifplatform-2017.133.0.0.4svn21156-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484468" comment="texlive-ifptex-2017.133.1.1svn44194-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484469" comment="texlive-ifsym-2017.133.svn24868-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484470" comment="texlive-iftex-2017.133.0.0.2svn29654-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484471" comment="texlive-ifthenx-2017.133.0.0.1asvn25819-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484472" comment="texlive-ifxetex-2017.133.0.0.6svn19685-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484473" comment="texlive-iitem-2017.133.1.0svn29613-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484474" comment="texlive-ijmart-2017.133.1.7svn30958-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484475" comment="texlive-ijqc-2017.133.1.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484476" comment="texlive-ijsra-2017.133.1.0svn44551-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484477" comment="texlive-imac-2017.133.svn17347-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484478" comment="texlive-image-gallery-2017.133.1.0jsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484479" comment="texlive-imakeidx-2017.133.1.3esvn42287-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484480" comment="texlive-imfellenglish-2017.133.svn38547-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484481" comment="texlive-imfellenglish-fonts-2017.133.svn38547-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484482" comment="texlive-impatient-2017.133.svn35573-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484483" comment="texlive-impatient-cn-2017.133.svn35576-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484484" comment="texlive-impatient-fr-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484485" comment="texlive-impnattypo-2017.133.1.4svn36448-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484486" comment="texlive-import-2017.133.5.1svn17361-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484487" comment="texlive-imsproc-2017.133.0.0.1svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484488" comment="texlive-imtekda-2017.133.1.7svn17667-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484489" comment="texlive-incgraph-2017.133.1.12svn36500-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484490" comment="texlive-inconsolata-2017.133.1.112svn42871-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484491" comment="texlive-inconsolata-fonts-2017.133.1.112svn42871-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484492" comment="texlive-index-2017.133.4.1betasvn24099-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484493" comment="texlive-indextools-2017.133.1.5.1svn38931-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484494" comment="texlive-initials-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484495" comment="texlive-initials-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484496" comment="texlive-inlinebib-2017.133.svn22018-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484497" comment="texlive-inlinedef-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484498" comment="texlive-inputtrc-2017.133.0.0.3svn28019-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484499" comment="texlive-insbox-2017.133.2.2svn34299-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484500" comment="texlive-interactiveworkbook-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484501" comment="texlive-interchar-2017.133.0.0.2svn36312-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484502" comment="texlive-interfaces-2017.133.3.1svn21474-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484503" comment="texlive-interpreter-2017.133.1.2svn27232-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484504" comment="texlive-interval-2017.133.0.0.3svn34840-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484505" comment="texlive-intro-scientific-2017.133.5th_editionsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484506" comment="texlive-inversepath-2017.133.0.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484507" comment="texlive-invoice-2017.133.svn39397-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484508" comment="texlive-ionumbers-2017.133.0.0.3.3svn33457-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484509" comment="texlive-iopart-num-2017.133.2.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484510" comment="texlive-ipaex-2017.133.svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484511" comment="texlive-ipaex-fonts-2017.133.svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484512" comment="texlive-ipaex-type1-2017.133.0.0.4asvn42403-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484513" comment="texlive-ipaex-type1-fonts-2017.133.0.0.4asvn42403-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484514" comment="texlive-iscram-2017.133.1.0.2svn42604-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484515" comment="texlive-iso-2017.133.2.4svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484516" comment="texlive-iso10303-2017.133.1.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484517" comment="texlive-isodate-2017.133.2.28svn16613-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484518" comment="texlive-isodoc-2017.133.1.09svn39520-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484519" comment="texlive-isomath-2017.133.0.0.6.1svn27654-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484520" comment="texlive-isonums-2017.133.1.0svn17362-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484521" comment="texlive-isorot-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484522" comment="texlive-isotope-2017.133.0.0.3svn23711-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484523" comment="texlive-issuulinks-2017.133.1.1svn25742-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484524" comment="texlive-itnumpar-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484525" comment="texlive-iwhdp-2017.133.0.0.50svn37552-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484526" comment="texlive-iwona-2017.133.0.0.995bsvn19611-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484527" comment="texlive-iwona-fonts-2017.133.0.0.995bsvn19611-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484528" comment="texlive-jablantile-2017.133.svn16364-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484529" comment="texlive-jacow-2017.133.1.95svn40523-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484530" comment="texlive-jadetex-2017.133.3.13svn41718-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486753" comment="texlive-jadetex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484532" comment="texlive-jamtimes-2017.133.1.12svn20408-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484533" comment="texlive-japanese-otf-2017.133.1.7b6svn42950-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484534" comment="texlive-japanese-otf-uptex-2017.133.0.0.18svn43395-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484535" comment="texlive-jknapltx-2017.133.svn19440-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484536" comment="texlive-jlabels-2017.133.svn24858-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484537" comment="texlive-jlreq-2017.133.svn44563-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484538" comment="texlive-jmlr-2017.133.1.23svn43458-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484539" comment="texlive-jmn-2017.133.svn22719-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484540" comment="texlive-jmn-fonts-2017.133.svn22719-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484541" comment="texlive-jneurosci-2017.133.1.00svn17346-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484542" comment="texlive-jpsj-2017.133.1.2.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484543" comment="texlive-js-misc-2017.133.svn16211-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484544" comment="texlive-jsclasses-2017.133.svn43403-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484545" comment="texlive-jslectureplanner-2017.133.1.5svn43476-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484546" comment="texlive-jumplines-2017.133.0.0.2svn37553-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484547" comment="texlive-junicode-2017.133.0.0.7.7svn28286-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484548" comment="texlive-junicode-fonts-2017.133.0.0.7.7svn28286-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484549" comment="texlive-jura-2017.133.4.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484550" comment="texlive-juraabbrev-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484551" comment="texlive-jurabib-2017.133.0.0.6svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484552" comment="texlive-juramisc-2017.133.0.0.91svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484553" comment="texlive-jurarsp-2017.133.0.0.52svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484554" comment="texlive-jvlisting-2017.133.0.0.7svn24638-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484555" comment="texlive-kantlipsum-2017.133.0.0.6svn27994-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484556" comment="texlive-karnaugh-2017.133.svn21338-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484557" comment="texlive-karnaugh-map-2017.133.1.1svn44131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484558" comment="texlive-karnaughmap-2017.133.2.0svn36989-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484559" comment="texlive-kastrup-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484560" comment="texlive-kdgdocs-2017.133.1.0svn24498-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484561" comment="texlive-kerkis-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484562" comment="texlive-kerkis-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484563" comment="texlive-kerntest-2017.133.1.32svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484564" comment="texlive-keycommand-2017.133.3.1415svn18042-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484565" comment="texlive-keyfloat-2017.133.0.0.15svn44306-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484566" comment="texlive-keyreader-2017.133.0.0.5bsvn28195-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484567" comment="texlive-keystroke-2017.133.1.6svn17992-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484568" comment="texlive-keyval2e-2017.133.0.0.0.2svn23698-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484569" comment="texlive-keyvaltable-2017.133.0.0.2svn41414-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484570" comment="texlive-kix-2017.133.svn21606-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484571" comment="texlive-kixfont-2017.133.svn18488-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484572" comment="texlive-kluwer-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484573" comment="texlive-knitting-2017.133.2.0svn19595-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484574" comment="texlive-knitting-fonts-2017.133.2.0svn19595-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484575" comment="texlive-knittingpattern-2017.133.svn17205-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484576" comment="texlive-knowledge-2017.133.1.01svn44565-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484577" comment="texlive-knuth-2017.133.svn32899-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484578" comment="texlive-knuth-lib-2017.133.svn35820-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484579" comment="texlive-knuth-local-2017.133.svn38627-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484580" comment="texlive-knuthotherfonts-2017.133.svn13293-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484581" comment="texlive-koma-moderncvclassic-2017.133.0.0.5svn25025-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484582" comment="texlive-koma-script-2017.133.3.23svn44226-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484583" comment="texlive-koma-script-examples-2017.133.svn34243-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484584" comment="texlive-koma-script-sfs-2017.133.1.0svn26137-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484585" comment="texlive-komacv-2017.133.1.1.1svn43902-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484586" comment="texlive-kotex-oblivoir-2017.133.2.1.8svn43130-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484587" comment="texlive-kotex-plain-2017.133.2.1.1asvn38630-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484588" comment="texlive-kotex-utf-2017.133.2.1.2svn38558-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484589" comment="texlive-kotex-utils-2017.133.2.1.0svn38727-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486754" comment="texlive-kotex-utils-bin-2017.20170520.svn32101-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484591" comment="texlive-kpathsea-2017.133.svn44223-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486755" comment="texlive-kpathsea-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486756" comment="texlive-kpathsea-devel-6.2.3-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484594" comment="texlive-kpfonts-2017.133.3.31svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484595" comment="texlive-kpfonts-fonts-2017.133.3.31svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484596" comment="texlive-ksfh_nat-2017.133.1.1svn24825-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484597" comment="texlive-ksp-thesis-2017.133.1.0.2svn39080-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484598" comment="texlive-ktv-texdata-2017.133.05.34svn27369-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484599" comment="texlive-kurier-2017.133.0.0.995bsvn19612-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484600" comment="texlive-kurier-fonts-2017.133.0.0.995bsvn19612-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484601" comment="texlive-l2picfaq-2017.133.1.50svn19601-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484602" comment="texlive-l2tabu-2017.133.2.4svn39597-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484603" comment="texlive-l2tabu-english-2017.133.1.8.5.7svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484604" comment="texlive-l2tabu-french-2017.133.2.3svn31315-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484605" comment="texlive-l2tabu-italian-2017.133.2.3svn25218-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484606" comment="texlive-l2tabu-spanish-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484607" comment="texlive-l3build-2017.133.svn44483-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484608" comment="texlive-l3experimental-2017.133.svn44483-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484609" comment="texlive-l3kernel-2017.133.svn44483-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484610" comment="texlive-l3packages-2017.133.svn44483-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484611" comment="texlive-labbook-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484612" comment="texlive-labels-2017.133.0.0.13svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484613" comment="texlive-labyrinth-2017.133.1.0svn33454-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484614" comment="texlive-lacheck-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486757" comment="texlive-lacheck-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484616" comment="texlive-ladder-2017.133.svn44394-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484617" comment="texlive-lambda-2017.133.svn28669-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484618" comment="texlive-lambda-lists-2017.133.svn31402-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484619" comment="texlive-langcode-2017.133.0.0.2svn27764-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484620" comment="texlive-langsci-2017.133.svn44096-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484621" comment="texlive-lapdf-2017.133.1.1svn23806-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484622" comment="texlive-lastpackage-2017.133.0.0.1svn34481-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484623" comment="texlive-lastpage-2017.133.1.2msvn36680-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484624" comment="texlive-latex-2017.133.20170101_pl1svn43813-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484625" comment="texlive-latex-bib-ex-2017.133.svn25831-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484626" comment="texlive-latex-bib2-ex-2017.133.svn40098-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484627" comment="texlive-latex-bin-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486758" comment="texlive-latex-bin-bin-2017.20170520.svn14050-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484629" comment="texlive-latex-brochure-2017.133.svn40612-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484630" comment="texlive-latex-course-2017.133.2svn25505-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484631" comment="texlive-latex-doc-ptr-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484632" comment="texlive-latex-fonts-2017.133.svn28888-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484633" comment="texlive-latex-git-log-2017.133.0.0.9svn30983-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486759" comment="texlive-latex-git-log-bin-2017.20170520.svn30983-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484635" comment="texlive-latex-graphics-companion-2017.133.svn29235-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484636" comment="texlive-latex-make-2017.133.2.2.3svn42914-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486890" comment="texlive-latex-notes-zh-cn-2017.137.1.20svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486891" comment="texlive-latex-papersize-2017.137.1.62svn42296-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486760" comment="texlive-latex-papersize-bin-2017.20170520.svn42296-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486892" comment="texlive-latex-referenz-2017.137.2svn36671-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486893" comment="texlive-latex-tabellen-2017.137.svn16979-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486894" comment="texlive-latex-tds-2017.137.svn40613-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486895" comment="texlive-latex-veryshortguide-2017.137.svn41844-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486896" comment="texlive-latex-web-companion-2017.137.svn29349-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486897" comment="texlive-latex2e-help-texinfo-2017.137.svn38709-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486898" comment="texlive-latex2e-help-texinfo-fr-2017.137.svn42541-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486899" comment="texlive-latex2e-help-texinfo-spanish-2017.137.svn37356-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486900" comment="texlive-latex2man-2017.137.1.25svn43855-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486761" comment="texlive-latex2man-bin-2017.20170520.svn13663-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486901" comment="texlive-latex2nemeth-2017.137.1.0svn42300-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486762" comment="texlive-latex2nemeth-bin-2017.20170520.svn42300-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486902" comment="texlive-latex4wp-2017.137.1.0.10svn35999-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486903" comment="texlive-latex4wp-it-2017.137.1.0.10svn36000-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486904" comment="texlive-latexbangla-2017.137.0.0.2svn42409-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486905" comment="texlive-latexbug-2017.137.1.0asvn44566-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486906" comment="texlive-latexcheat-2017.137.1.13svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486907" comment="texlive-latexcheat-de-2017.137.svn35702-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486908" comment="texlive-latexcheat-esmx-2017.137.2.00svn36866-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486909" comment="texlive-latexcheat-ptbr-2017.137.1.13svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486910" comment="texlive-latexconfig-2017.137.svn40274-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486911" comment="texlive-latexcourse-rug-2017.137.1.1svn39026-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486912" comment="texlive-latexdemo-2017.137.0.0.1svn34481-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486913" comment="texlive-latexdiff-2017.137.1.2.0svn41892-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486763" comment="texlive-latexdiff-bin-2017.20170520.svn16420-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486914" comment="texlive-latexfileinfo-pkgs-2017.137.0.0.22svn26760-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486915" comment="texlive-latexfileversion-2017.137.0.0.3svn29349-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486764" comment="texlive-latexfileversion-bin-2017.20170520.svn25012-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486916" comment="texlive-latexgit-2017.137.svn41920-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486917" comment="texlive-latexindent-2017.137.3.1svn44492-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486765" comment="texlive-latexindent-bin-2017.20170520.svn32150-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486918" comment="texlive-latexmk-2017.137.4.52csvn43099-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486766" comment="texlive-latexmk-bin-2017.20170520.svn10937-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486919" comment="texlive-latexmp-2017.137.1.2.1svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486920" comment="texlive-latexpand-2017.137.1.3svn41873-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486767" comment="texlive-latexpand-bin-2017.20170520.svn27025-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486921" comment="texlive-lato-2017.137.2.2svn24986-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486922" comment="texlive-lato-fonts-2017.137.2.2svn24986-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486923" comment="texlive-layaureo-2017.137.0.0.2svn19087-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486924" comment="texlive-layouts-2017.137.2.6dsvn42428-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486925" comment="texlive-lazylist-2017.137.1.0asvn17691-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486926" comment="texlive-lcd-2017.137.0.0.3svn16549-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486927" comment="texlive-lcdftypetools-2017.137.svn44166-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486768" comment="texlive-lcdftypetools-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486928" comment="texlive-lcg-2017.137.1.3svn31474-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486929" comment="texlive-lcyw-2017.137.1.1svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486930" comment="texlive-leading-2017.137.0.0.3svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486931" comment="texlive-leadsheets-2017.137.0.0.5asvn43034-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486932" comment="texlive-leaflet-2017.137.1.1bsvn43523-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486933" comment="texlive-lecturer-2017.137.svn23916-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486934" comment="texlive-ledmac-2017.137.0.0.19.4svn41811-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486935" comment="texlive-leftidx-2017.137.svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486936" comment="texlive-leipzig-2017.137.1.1svn34902-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486937" comment="texlive-lengthconvert-2017.137.1.0asvn30867-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486938" comment="texlive-lettre-2017.137.2.353svn35145-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486939" comment="texlive-lettrine-2017.137.1.9svn38268-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486940" comment="texlive-levy-2017.137.svn21750-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486941" comment="texlive-lewis-2017.137.0.0.1svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486942" comment="texlive-lexikon-2017.137.1.0csvn17364-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486943" comment="texlive-lexref-2017.137.1.1asvn36026-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486944" comment="texlive-lfb-2017.137.1.0svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486945" comment="texlive-lgreek-2017.137.svn21818-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486946" comment="texlive-lh-2017.137.3.5gsvn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486947" comment="texlive-lhcyr-2017.137.svn31795-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486948" comment="texlive-lhelp-2017.137.2.0svn23638-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486949" comment="texlive-libertine-2017.137.5.3.0svn43603-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486950" comment="texlive-libertine-fonts-2017.137.5.3.0svn43603-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486951" comment="texlive-libertinegc-2017.137.1.00svn39746-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486952" comment="texlive-libertinus-2017.137.6.4svn44409-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486953" comment="texlive-libertinus-fonts-2017.137.6.4svn44409-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486954" comment="texlive-libertinust1math-2017.137.1.0.4svn44542-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486955" comment="texlive-libertinust1math-fonts-2017.137.1.0.4svn44542-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486956" comment="texlive-libgreek-2017.137.1.0svn27789-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486957" comment="texlive-librarian-2017.137.1.0svn19880-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486958" comment="texlive-librebaskerville-2017.137.svn31741-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486959" comment="texlive-librebaskerville-fonts-2017.137.svn31741-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486960" comment="texlive-librebodoni-2017.137.svn39375-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486961" comment="texlive-librebodoni-fonts-2017.137.svn39375-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486962" comment="texlive-librecaslon-2017.137.svn31929-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486963" comment="texlive-librecaslon-fonts-2017.137.svn31929-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486964" comment="texlive-libris-2017.137.1.007svn19409-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486965" comment="texlive-libris-fonts-2017.137.1.007svn19409-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486966" comment="texlive-lilyglyphs-2017.137.0.0.2.3svn33164-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486769" comment="texlive-lilyglyphs-bin-2017.20170520.svn31696-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486967" comment="texlive-lilyglyphs-fonts-2017.137.0.0.2.3svn33164-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486968" comment="texlive-limap-2017.137.2.1svn41390-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486969" comment="texlive-linearA-2017.137.svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486970" comment="texlive-linearA-fonts-2017.137.svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486971" comment="texlive-linegoal-2017.137.2.9svn21523-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486972" comment="texlive-lineno-2017.137.4.41svn21442-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486973" comment="texlive-ling-macros-2017.137.svn42268-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486974" comment="texlive-linguex-2017.137.4.3svn30815-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486975" comment="texlive-linop-2017.137.0.0.1svn41304-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486976" comment="texlive-lion-msc-2017.137.0.0.27svn44131-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486977" comment="texlive-lipsum-2017.137.1.3svn34800-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486978" comment="texlive-lisp-on-tex-2017.137.2.0svn38722-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486979" comment="texlive-listbib-2017.137.2.2svn29349-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486770" comment="texlive-listbib-bin-2017.20170520.svn26126-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486980" comment="texlive-listing-2017.137.1.2svn17373-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486981" comment="texlive-listings-2017.137.1.6svn37534-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486982" comment="texlive-listings-ext-2017.137.67svn29349-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486771" comment="texlive-listings-ext-bin-2017.20170520.svn15093-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486983" comment="texlive-listlbls-2017.137.1.03svn34893-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486984" comment="texlive-listliketab-2017.137.svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486985" comment="texlive-listofitems-2017.137.1.3svn42530-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486986" comment="texlive-listofsymbols-2017.137.0.0.2svn16134-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486987" comment="texlive-lithuanian-2017.137.svn22722-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486988" comment="texlive-liturg-2017.137.1.0svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486989" comment="texlive-lkproof-2017.137.3.1svn20021-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486990" comment="texlive-lm-2017.137.2.004svn28119-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486991" comment="texlive-lm-fonts-2017.137.2.004svn28119-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486992" comment="texlive-lm-math-2017.137.1.959svn36915-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486993" comment="texlive-lm-math-fonts-2017.137.1.959svn36915-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486994" comment="texlive-lmake-2017.137.1.0svn25552-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486995" comment="texlive-lni-2017.137.1.3svn44368-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486996" comment="texlive-lobster2-2017.137.svn32617-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486997" comment="texlive-lobster2-fonts-2017.137.svn32617-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486998" comment="texlive-locality-2017.137.0.0.2svn20422-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486999" comment="texlive-localloc-2017.137.svn21934-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487000" comment="texlive-logbox-2017.137.1.0svn24499-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487001" comment="texlive-logical-markup-utils-2017.137.svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487002" comment="texlive-logicproof-2017.137.svn33254-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487003" comment="texlive-logicpuzzle-2017.137.2.5svn34491-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487004" comment="texlive-logpap-2017.137.0.0.6svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487005" comment="texlive-logreq-2017.137.1.0svn19640-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487006" comment="texlive-lollipop-2017.137.1.07svn41438-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486772" comment="texlive-lollipop-bin-2017.20170520.svn41465-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487007" comment="texlive-longdivision-2017.137.1.0svn43159-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487008" comment="texlive-longfbox-2017.137.1.0svn39028-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487009" comment="texlive-longfigure-2017.137.1.0svn34302-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487010" comment="texlive-longnamefilelist-2017.137.0.0.2svn27889-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487011" comment="texlive-loops-2017.137.1.3svn30704-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487012" comment="texlive-lpform-2017.137.svn36918-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487013" comment="texlive-lpic-2017.137.0.0.8svn20843-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487014" comment="texlive-lplfitch-2017.137.0.0.9svn31077-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487015" comment="texlive-lps-2017.137.0.0.7svn21322-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487016" comment="texlive-lroundrect-2017.137.1.0svn39804-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487017" comment="texlive-lsc-2017.137.svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487018" comment="texlive-lshort-bulgarian-2017.137.svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487019" comment="texlive-lshort-chinese-2017.137.5.10svn43606-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487020" comment="texlive-lshort-czech-2017.137.4.27svn29803-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487021" comment="texlive-lshort-dutch-2017.137.1.3svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487022" comment="texlive-lshort-english-2017.137.5.0.5svn37892-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487023" comment="texlive-lshort-estonian-2017.137.5.05svn39323-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487024" comment="texlive-lshort-finnish-2017.137.svn15878-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487025" comment="texlive-lshort-french-2017.137.5.01fr_0svn23332-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487026" comment="texlive-lshort-german-2017.137.3.0bsvn42434-7.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484787" comment="texlive-lshort-italian-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484788" comment="texlive-lshort-japanese-2017.133.svn36207-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484789" comment="texlive-lshort-korean-2017.133.4.17svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484790" comment="texlive-lshort-mongol-2017.133.4.26svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484791" comment="texlive-lshort-persian-2017.133.5.01svn31296-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484792" comment="texlive-lshort-polish-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484793" comment="texlive-lshort-portuguese-2017.133.5.01.0svn22569-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484794" comment="texlive-lshort-russian-2017.133.svn18906-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484795" comment="texlive-lshort-slovak-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484796" comment="texlive-lshort-slovenian-2017.133.4.20svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484797" comment="texlive-lshort-spanish-2017.133.0.0.5svn35050-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484798" comment="texlive-lshort-thai-2017.133.1.32svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484799" comment="texlive-lshort-turkish-2017.133.4.20svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484800" comment="texlive-lshort-ukr-2017.133.4.00svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484801" comment="texlive-lshort-vietnamese-2017.133.4.00svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484802" comment="texlive-lstaddons-2017.133.0.0.1svn26196-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484803" comment="texlive-lstbayes-2017.133.svn41550-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484804" comment="texlive-lt3graph-2017.133.0.0.1.8svn42874-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484805" comment="texlive-ltablex-2017.133.1.1svn34923-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484806" comment="texlive-ltabptch-2017.133.1.74dsvn17533-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484807" comment="texlive-ltb2bib-2017.133.0.0.01svn43746-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484808" comment="texlive-ltxdockit-2017.133.1.2dsvn21869-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484809" comment="texlive-ltxfileinfo-2017.133.2.04svn38663-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486773" comment="texlive-ltxfileinfo-bin-2017.20170520.svn29005-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484811" comment="texlive-ltximg-2017.133.1.2svn37006-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486774" comment="texlive-ltximg-bin-2017.20170520.svn32346-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484813" comment="texlive-ltxindex-2017.133.0.0.1csvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484814" comment="texlive-ltxkeys-2017.133.0.0.0.3csvn28332-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484815" comment="texlive-ltxmisc-2017.133.svn21927-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484816" comment="texlive-ltxnew-2017.133.1.3svn21586-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484817" comment="texlive-ltxtools-2017.133.0.0.0.1asvn24897-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484818" comment="texlive-lua-alt-getopt-2017.133.0.0.7.0svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484819" comment="texlive-lua-check-hyphen-2017.133.0.0.4svn40229-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484820" comment="texlive-lua-visual-debug-2017.133.0.0.5svn41387-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484821" comment="texlive-lua2dox-2017.133.0.0.2svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486775" comment="texlive-lua2dox-bin-2017.20170520.svn29053-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484823" comment="texlive-luabibentry-2017.133.0.0.1asvn31783-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484824" comment="texlive-luabidi-2017.133.0.0.2svn30790-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484825" comment="texlive-luacode-2017.133.1.2asvn25193-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484826" comment="texlive-luahyphenrules-2017.133.1.0svn42670-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484827" comment="texlive-luaindex-2017.133.0.0.1bsvn25882-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484828" comment="texlive-luainputenc-2017.133.0.0.973svn20491-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484829" comment="texlive-luaintro-2017.133.0.0.03svn35490-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484830" comment="texlive-lualatex-doc-2017.133.svn30473-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484831" comment="texlive-lualatex-doc-de-2017.133.1.0svn30474-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484832" comment="texlive-lualatex-math-2017.133.1.6svn40621-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484833" comment="texlive-lualibs-2017.133.2.5svn43153-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484834" comment="texlive-luamesh-2017.133.0.0.51svn43814-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484835" comment="texlive-luamplib-2017.133.2.12.1svn44496-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484836" comment="texlive-luaotfload-2017.133.2.8_fix_2svn43194-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486776" comment="texlive-luaotfload-bin-2017.20170520.svn34647-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484838" comment="texlive-luapackageloader-2017.133.0.0.1svn44500-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484839" comment="texlive-luasseq-2017.133.svn37877-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484840" comment="texlive-luatex-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486777" comment="texlive-luatex-bin-2017.20170520.svn44549-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484842" comment="texlive-luatex85-2017.133.1.4svn41456-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484843" comment="texlive-luatexbase-2017.133.1.3svn38550-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484844" comment="texlive-luatexja-2017.133.20170505.0svn44217-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484845" comment="texlive-luatexko-2017.133.1.17svn44141-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484846" comment="texlive-luatextra-2017.133.1.0.1svn20747-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484847" comment="texlive-luatodonotes-2017.133.0.0.3svn39019-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484848" comment="texlive-luaxml-2017.133.0.0.0.2svn32741-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484849" comment="texlive-lwarp-2017.133.0.0.32svn44552-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486778" comment="texlive-lwarp-bin-2017.20170520.svn43292-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484851" comment="texlive-lxfonts-2017.133.2.0bsvn32354-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484852" comment="texlive-lxfonts-fonts-2017.133.2.0bsvn32354-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484853" comment="texlive-ly1-2017.133.svn21086-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484854" comment="texlive-m-tx-2017.133.0.0.62asvn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486779" comment="texlive-m-tx-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484856" comment="texlive-macros2e-2017.133.0.0.4svn23236-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484857" comment="texlive-macroswap-2017.133.1.1svn31498-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484858" comment="texlive-mafr-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484859" comment="texlive-magaz-2017.133.0.0.4svn24694-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484860" comment="texlive-mailing-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484861" comment="texlive-mailmerge-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484862" comment="texlive-make4ht-2017.133.0.0.1csvn44079-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486780" comment="texlive-make4ht-bin-2017.20170520.svn37750-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484864" comment="texlive-makebarcode-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484865" comment="texlive-makebase-2017.133.0.0.2svn41012-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484866" comment="texlive-makebox-2017.133.0.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484867" comment="texlive-makecell-2017.133.0.0.1esvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484868" comment="texlive-makecirc-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484869" comment="texlive-makecmds-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484870" comment="texlive-makedtx-2017.133.0.0.94bsvn38769-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486781" comment="texlive-makedtx-bin-2017.20170520.svn38769-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484872" comment="texlive-makeglos-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484873" comment="texlive-makeindex-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486782" comment="texlive-makeindex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484875" comment="texlive-makeplot-2017.133.1.0.6svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484876" comment="texlive-makeshape-2017.133.2.1svn28973-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484877" comment="texlive-mandi-2017.133.2.6.1svn41598-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484878" comment="texlive-manfnt-2017.133.svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484879" comment="texlive-manfnt-font-2017.133.svn35799-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484880" comment="texlive-manfnt-font-fonts-2017.133.svn35799-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484881" comment="texlive-manuscript-2017.133.1.7svn36110-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484882" comment="texlive-margbib-2017.133.1.0csvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484883" comment="texlive-marginfix-2017.133.1.1svn31598-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484884" comment="texlive-marginnote-2017.133.1.2bsvn43979-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484885" comment="texlive-markdown-2017.133.2.5.3svn44237-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484886" comment="texlive-marvosym-2017.133.2.2asvn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484887" comment="texlive-marvosym-fonts-2017.133.2.2asvn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484888" comment="texlive-matc3-2017.133.1.0.1svn29845-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484889" comment="texlive-matc3mem-2017.133.1.1svn35773-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484890" comment="texlive-match_parens-2017.133.1.43svn36270-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486783" comment="texlive-match_parens-bin-2017.20170520.svn23500-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484892" comment="texlive-math-e-2017.133.svn20062-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484893" comment="texlive-math-into-latex-4-2017.133.svn44131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484894" comment="texlive-mathabx-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484895" comment="texlive-mathabx-type1-2017.133.svn21129-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484896" comment="texlive-mathabx-type1-fonts-2017.133.svn21129-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484897" comment="texlive-mathalfa-2017.133.1.09svn43332-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484898" comment="texlive-mathastext-2017.133.1.3rsvn42447-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484899" comment="texlive-mathcomp-2017.133.0.0.1fsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484900" comment="texlive-mathdesign-2017.133.2.31svn31639-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484901" comment="texlive-mathdesign-fonts-2017.133.2.31svn31639-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484902" comment="texlive-mathdots-2017.133.0.0.9svn34301-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484903" comment="texlive-mathexam-2017.133.1.00svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484904" comment="texlive-mathpartir-2017.133.1.3.2svn39864-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484905" comment="texlive-mathpazo-2017.133.1.003svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484906" comment="texlive-mathpazo-fonts-2017.133.1.003svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484907" comment="texlive-mathpunctspace-2017.133.1.0svn44131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484908" comment="texlive-maths-symbols-2017.133.3.4svn37763-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484909" comment="texlive-mathspec-2017.133.0.0.2bsvn42773-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484910" comment="texlive-mathspic-2017.133.1.13svn31957-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486784" comment="texlive-mathspic-bin-2017.20170520.svn23661-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484912" comment="texlive-mathtools-2017.133.1.19svn44504-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484913" comment="texlive-matlab-prettifier-2017.133.0.0.3svn34323-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484914" comment="texlive-mattens-2017.133.1.3svn17582-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484915" comment="texlive-maybemath-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484916" comment="texlive-mbenotes-2017.133.2svn31813-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484917" comment="texlive-mcaption-2017.133.3.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484918" comment="texlive-mceinleger-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484919" comment="texlive-mcexam-2017.133.0.0.3svn44171-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484920" comment="texlive-mcf2graph-2017.133.4.23svn44468-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484921" comment="texlive-mcite-2017.133.1.6svn18173-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484922" comment="texlive-mciteplus-2017.133.1.2svn31648-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484923" comment="texlive-mcmthesis-2017.133.6.2svn39515-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484924" comment="texlive-mdframed-2017.133.1.9bsvn31075-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484925" comment="texlive-mdputu-2017.133.1.2svn20298-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484926" comment="texlive-mdsymbol-2017.133.0.0.5svn28399-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484927" comment="texlive-mdsymbol-fonts-2017.133.0.0.5svn28399-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484928" comment="texlive-mdwtools-2017.133.1.05.4svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484929" comment="texlive-media9-2017.133.0.0.79svn44045-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484930" comment="texlive-medstarbeamer-2017.133.svn38828-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484931" comment="texlive-meetingmins-2017.133.1.6svn31878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484932" comment="texlive-memdesign-2017.133.svn34157-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484933" comment="texlive-memexsupp-2017.133.0.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484934" comment="texlive-memoir-2017.133.3.7fsvn41203-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484935" comment="texlive-memory-2017.133.1.2svn30452-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484936" comment="texlive-mendex-doc-2017.133.svn42767-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484937" comment="texlive-mentis-2017.133.1.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484938" comment="texlive-menu-2017.133.0.0.994svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484939" comment="texlive-menukeys-2017.133.1.5svn41823-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484940" comment="texlive-merriweather-2017.133.svn34315-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484941" comment="texlive-merriweather-fonts-2017.133.svn34315-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484942" comment="texlive-metafont-2017.133.2.7182818svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484943" comment="texlive-metafont-beginners-2017.133.svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486785" comment="texlive-metafont-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484945" comment="texlive-metago-2017.133.0.0.9svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484946" comment="texlive-metalogo-2017.133.0.0.12svn18611-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484947" comment="texlive-metaobj-2017.133.0.0.93svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484948" comment="texlive-metaplot-2017.133.0.0.91svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484949" comment="texlive-metapost-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486786" comment="texlive-metapost-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484951" comment="texlive-metapost-examples-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484952" comment="texlive-metapost-fonts-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484953" comment="texlive-metatex-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484954" comment="texlive-metatype1-2017.133.0.0.56svn37105-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484955" comment="texlive-metauml-2017.133.0.0.2.5svn19692-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484956" comment="texlive-method-2017.133.2.0bsvn17485-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484957" comment="texlive-metre-2017.133.1.0svn18489-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484958" comment="texlive-metrix-2017.133.1.3svn40099-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484959" comment="texlive-mex-2017.133.1.05svn40855-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486787" comment="texlive-mex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484961" comment="texlive-mf2pt1-2017.133.2.5asvn33802-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486788" comment="texlive-mf2pt1-bin-2017.20170520.svn23406-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484963" comment="texlive-mfirstuc-2017.133.2.04svn41785-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484964" comment="texlive-mflogo-2017.133.2.0svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484965" comment="texlive-mflogo-font-2017.133.1.002svn36898-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484966" comment="texlive-mflogo-font-fonts-2017.133.1.002svn36898-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484967" comment="texlive-mflua-2017.133.svn43947-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486789" comment="texlive-mflua-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484969" comment="texlive-mfnfss-2017.133.svn19410-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484970" comment="texlive-mfpic-2017.133.1.10svn28444-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484971" comment="texlive-mfpic4ode-2017.133.0.0.4svn17745-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484972" comment="texlive-mftinc-2017.133.1.0asvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484973" comment="texlive-mfware-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486790" comment="texlive-mfware-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484975" comment="texlive-mgltex-2017.133.4.2svn41676-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484976" comment="texlive-mhchem-2017.133.svn44451-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484977" comment="texlive-mhequ-2017.133.1.7svn38224-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484978" comment="texlive-miama-2017.133.1.0svn39837-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484979" comment="texlive-miama-fonts-2017.133.1.0svn39837-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484980" comment="texlive-microtype-2017.133.2.6asvn41127-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484981" comment="texlive-microtype-de-2017.133.2.4svn24549-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484982" comment="texlive-midnight-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484983" comment="texlive-midpage-2017.133.1.1asvn17484-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484984" comment="texlive-miller-2017.133.1.2svn18789-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484985" comment="texlive-milog-2017.133.1.0svn41610-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484986" comment="texlive-minibox-2017.133.0.0.2asvn30914-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484987" comment="texlive-minidocument-2017.133.1.0svn43752-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484988" comment="texlive-minifp-2017.133.0.0.96svn32559-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484989" comment="texlive-minipage-marginpar-2017.133.0.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484990" comment="texlive-miniplot-2017.133.svn17483-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484991" comment="texlive-minitoc-2017.133.61svn37852-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484992" comment="texlive-minorrevision-2017.133.1.1svn32165-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484993" comment="texlive-minted-2017.133.2.4.1svn42418-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484994" comment="texlive-mintspirit-2017.133.svn32069-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484995" comment="texlive-mintspirit-fonts-2017.133.svn32069-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484996" comment="texlive-minutes-2017.133.1.8fsvn42186-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484997" comment="texlive-missaali-2017.133.1.004svn42810-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484998" comment="texlive-missaali-fonts-2017.133.1.004svn42810-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009484999" comment="texlive-mkgrkindex-2017.133.2.0svn26313-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486791" comment="texlive-mkgrkindex-bin-2017.20170520.svn14428-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485001" comment="texlive-mkjobtexmf-2017.133.0.0.8svn29725-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486792" comment="texlive-mkjobtexmf-bin-2017.20170520.svn8457-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485003" comment="texlive-mkpattern-2017.133.1.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485004" comment="texlive-mkpic-2017.133.1.02svn33700-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486793" comment="texlive-mkpic-bin-2017.20170520.svn33688-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485006" comment="texlive-mla-paper-2017.133.svn20885-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485007" comment="texlive-mlist-2017.133.0.0.6asvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485008" comment="texlive-mltex-2017.133.2.2svn39057-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486794" comment="texlive-mltex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485010" comment="texlive-mmap-2017.133.1.03svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485011" comment="texlive-mnotes-2017.133.0.0.8svn35521-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485012" comment="texlive-mnras-2017.133.3.0svn37579-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485013" comment="texlive-mnsymbol-2017.133.1.4svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485014" comment="texlive-mnsymbol-fonts-2017.133.1.4svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485015" comment="texlive-moderncv-2017.133.2.0.0svn37992-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485016" comment="texlive-moderntimeline-2017.133.0.0.9svn38254-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485017" comment="texlive-modiagram-2017.133.0.0.2gsvn38448-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485018" comment="texlive-modref-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485019" comment="texlive-modroman-2017.133.1svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485020" comment="texlive-modular-2017.133.svn44142-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485021" comment="texlive-mongolian-babel-2017.133.1.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485022" comment="texlive-monofill-2017.133.0.0.2svn28140-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485023" comment="texlive-montex-2017.133.ivu.04.092svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485024" comment="texlive-montex-fonts-2017.133.ivu.04.092svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485025" comment="texlive-montserrat-2017.133.1.01svn43347-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485026" comment="texlive-montserrat-fonts-2017.133.1.01svn43347-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485027" comment="texlive-moodle-2017.133.0.0.5svn39367-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485028" comment="texlive-moreenum-2017.133.1.03svn24479-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485029" comment="texlive-morefloats-2017.133.1.0hsvn37927-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485030" comment="texlive-morehype-2017.133.r0.83svn38815-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485031" comment="texlive-moresize-2017.133.1.9svn17513-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485032" comment="texlive-moreverb-2017.133.2.3asvn22126-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485033" comment="texlive-morewrites-2017.133.svn43945-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485034" comment="texlive-movie15-2017.133.svn26473-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485035" comment="texlive-mp3d-2017.133.1.34svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485036" comment="texlive-mparhack-2017.133.1.4svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485037" comment="texlive-mparrows-2017.133.0.0.1svn39729-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485038" comment="texlive-mpattern-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485039" comment="texlive-mpcolornames-2017.133.0.0.20svn23252-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485040" comment="texlive-mpgraphics-2017.133.0.0.3svn29776-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485041" comment="texlive-mpman-ru-2017.133.1.004svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485042" comment="texlive-mpostinl-2017.133.1.11svn43670-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485043" comment="texlive-mptopdf-2017.133.svn41282-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486795" comment="texlive-mptopdf-bin-2017.20170520.svn18674-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485045" comment="texlive-mptrees-2017.133.17.06svn44453-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485046" comment="texlive-ms-2017.133.svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485047" comment="texlive-msc-2017.133.1.16svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485048" comment="texlive-msg-2017.133.0.0.40svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485049" comment="texlive-mslapa-2017.133.svn17514-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485050" comment="texlive-msu-thesis-2017.133.2.6bsvn41345-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485051" comment="texlive-mtgreek-2017.133.1.1+svn17967-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485052" comment="texlive-mucproc-2017.133.1.02svn43445-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485053" comment="texlive-mugsthesis-2017.133.svn34878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485054" comment="texlive-multenum-2017.133.svn21775-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485055" comment="texlive-multiaudience-2017.133.1.03svn38035-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485056" comment="texlive-multibbl-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485057" comment="texlive-multibib-2017.133.1.4svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485058" comment="texlive-multibibliography-2017.133.1.03svn30939-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486796" comment="texlive-multibibliography-bin-2017.20170520.svn30534-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485060" comment="texlive-multicap-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485061" comment="texlive-multidef-2017.133.1.10svn40637-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485062" comment="texlive-multido-2017.133.1.42svn18302-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485063" comment="texlive-multienv-2017.133.1.0svn26544-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485064" comment="texlive-multiexpand-2017.133.1.4svn38416-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485065" comment="texlive-multiobjective-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485066" comment="texlive-multirow-2017.133.2.2svn42588-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485067" comment="texlive-munich-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485068" comment="texlive-musixguit-2017.133.1.2.2svn21649-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485069" comment="texlive-musixtex-2017.133.1.24svn43375-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486797" comment="texlive-musixtex-bin-2017.20170520.svn37026-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485071" comment="texlive-musixtex-fonts-2017.133.svn37762-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485072" comment="texlive-musixtex-fonts-fonts-2017.133.svn37762-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485073" comment="texlive-musixtnt-2017.133.svn40307-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486798" comment="texlive-musixtnt-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485075" comment="texlive-musuos-2017.133.1.1dsvn24857-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485076" comment="texlive-muthesis-2017.133.svn23861-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485077" comment="texlive-mversion-2017.133.1.0.1svn29370-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485078" comment="texlive-mwcls-2017.133.0.0.75svn44352-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485079" comment="texlive-mwe-2017.133.0.0.3svn26422-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485080" comment="texlive-mweights-2017.133.svn43647-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485081" comment="texlive-mxedruli-2017.133.3.3csvn30021-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485082" comment="texlive-mxedruli-fonts-2017.133.3.3csvn30021-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485083" comment="texlive-mychemistry-2017.133.1.99bsvn28611-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485084" comment="texlive-mycv-2017.133.1.5.6svn26807-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485085" comment="texlive-mylatexformat-2017.133.3.4svn21392-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485086" comment="texlive-mynsfc-2017.133.1.01svn41996-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485087" comment="texlive-nag-2017.133.0.0.7svn24741-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485088" comment="texlive-nameauth-2017.133.3.2svn43586-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485089" comment="texlive-namespc-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485090" comment="texlive-nanumtype1-2017.133.3.0svn29558-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485091" comment="texlive-nanumtype1-fonts-2017.133.3.0svn29558-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485092" comment="texlive-nar-2017.133.3.19svn38100-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485093" comment="texlive-natbib-2017.133.8.31bsvn20668-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485094" comment="texlive-natded-2017.133.0.0.1svn32693-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485095" comment="texlive-nath-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485096" comment="texlive-nature-2017.133.1.0svn21819-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485097" comment="texlive-navigator-2017.133.1.1svn41413-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485098" comment="texlive-navydocs-2017.133.1.1svn41643-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485099" comment="texlive-ncclatex-2017.133.1.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485100" comment="texlive-ncctools-2017.133.3.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485101" comment="texlive-ncntrsbk-2017.133.svn31835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485102" comment="texlive-ncntrsbk-fonts-2017.133.svn31835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485103" comment="texlive-nddiss-2017.133.3.0svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485104" comment="texlive-ndsu-thesis-2017.133.svn40536-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485105" comment="texlive-needspace-2017.133.1.3dsvn29601-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485106" comment="texlive-nestquot-2017.133.svn27323-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485107" comment="texlive-neuralnetwork-2017.133.1.0svn31500-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485108" comment="texlive-nevelok-2017.133.1.03svn39029-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485109" comment="texlive-newcommand-2017.133.2.0svn18704-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485110" comment="texlive-newenviron-2017.133.1.0svn29331-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485111" comment="texlive-newfile-2017.133.1.0csvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485112" comment="texlive-newlfm-2017.133.9.4svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485113" comment="texlive-newpx-2017.133.1.32svn44457-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485114" comment="texlive-newpx-fonts-2017.133.1.32svn44457-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485115" comment="texlive-newsletr-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485116" comment="texlive-newspaper-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485117" comment="texlive-newtx-2017.133.1.525svn44520-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485118" comment="texlive-newtx-fonts-2017.133.1.525svn44520-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485119" comment="texlive-newtxsf-2017.133.1.05svn41918-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485120" comment="texlive-newtxsf-fonts-2017.133.1.05svn41918-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485121" comment="texlive-newtxtt-2017.133.1.055svn44510-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485122" comment="texlive-newtxtt-fonts-2017.133.1.055svn44510-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485123" comment="texlive-newunicodechar-2017.133.1.1svn28253-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485124" comment="texlive-newvbtm-2017.133.1.1svn23996-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485125" comment="texlive-newverbs-2017.133.1.3asvn26258-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485126" comment="texlive-nextpage-2017.133.1.1asvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485127" comment="texlive-nfssext-cfr-2017.133.svn43640-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485128" comment="texlive-nicefilelist-2017.133.0.0.7asvn28527-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485129" comment="texlive-niceframe-2017.133.1.1csvn36086-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485130" comment="texlive-nicetext-2017.133.r0.67svn38914-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485131" comment="texlive-nih-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485132" comment="texlive-nihbiosketch-2017.133.svn39460-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485133" comment="texlive-nimbus15-2017.133.1.00svn39343-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485134" comment="texlive-nimbus15-fonts-2017.133.1.00svn39343-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485135" comment="texlive-nkarta-2017.133.0.0.2svn16437-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485136" comment="texlive-nlctdoc-2017.133.1.06svn44353-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485137" comment="texlive-nmbib-2017.133.1.04svn37984-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485138" comment="texlive-noconflict-2017.133.1.0svn30140-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485139" comment="texlive-nodetree-2017.133.1.2svn43011-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485140" comment="texlive-noindentafter-2017.133.0.0.2.2svn35709-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485141" comment="texlive-noitcrul-2017.133.0.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485142" comment="texlive-nolbreaks-2017.133.1.2svn26786-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485143" comment="texlive-nomencl-2017.133.3.1asvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485144" comment="texlive-nomentbl-2017.133.0.0.4svn16549-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485145" comment="texlive-nonfloat-2017.133.1.0svn17598-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485146" comment="texlive-nonumonpart-2017.133.1svn22114-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485147" comment="texlive-nopageno-2017.133.svn18128-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485148" comment="texlive-norasi-c90-2017.133.svn37675-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485149" comment="texlive-normalcolor-2017.133.r11svn40125-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485150" comment="texlive-nostarch-2017.133.1.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485151" comment="texlive-notes-2017.133.1.0.1svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485152" comment="texlive-notes2bib-2017.133.2.0ksvn31162-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485153" comment="texlive-notespages-2017.133.0.0.8.1svn41906-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485154" comment="texlive-notex-bst-2017.133.svn42361-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485155" comment="texlive-noto-2017.133.svn42881-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485156" comment="texlive-noto-fonts-2017.133.svn42881-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485157" comment="texlive-notoccite-2017.133.svn18129-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485158" comment="texlive-novel-2017.133.1.2svn44529-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485159" comment="texlive-novel-fonts-2017.133.1.2svn44529-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485160" comment="texlive-nowidow-2017.133.1.0svn24066-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485161" comment="texlive-nox-2017.133.1.0svn30991-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485162" comment="texlive-nrc-2017.133.2.01asvn29027-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485163" comment="texlive-ntgclass-2017.133.2.1asvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485164" comment="texlive-ntheorem-2017.133.1.33svn27609-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485165" comment="texlive-ntheorem-vn-2017.133.1.203svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485166" comment="texlive-nuc-2017.133.0.0.1svn22256-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485167" comment="texlive-nucleardata-2017.133.1.01dsvn42307-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485168" comment="texlive-numberedblock-2017.133.1.10svn33109-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485169" comment="texlive-numericplots-2017.133.2.0.2svn31729-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485170" comment="texlive-numname-2017.133.svn18130-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485171" comment="texlive-numprint-2017.133.1.39svn27498-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485172" comment="texlive-numspell-2017.133.1.0svn43189-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485173" comment="texlive-nwejm-2017.133.0.0.98dsvn44131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485174" comment="texlive-oberdiek-2017.133.svn43610-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485175" comment="texlive-objectz-2017.133.svn19389-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485176" comment="texlive-obnov-2017.133.0.0.11svn33355-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485177" comment="texlive-ocg-p-2017.133.0.0.4svn28803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485178" comment="texlive-ocgx-2017.133.0.0.5svn28492-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485179" comment="texlive-ocgx2-2017.133.0.0.29svn44528-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485180" comment="texlive-ocherokee-2017.133.svn25689-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485181" comment="texlive-ocherokee-fonts-2017.133.svn25689-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485182" comment="texlive-ocr-b-2017.133.svn20852-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485183" comment="texlive-ocr-b-outline-2017.133.svn20969-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485184" comment="texlive-ocr-b-outline-fonts-2017.133.svn20969-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485185" comment="texlive-ocr-latex-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485186" comment="texlive-octavo-2017.133.1.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485187" comment="texlive-odsfile-2017.133.0.0.6svn38449-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485188" comment="texlive-ofs-2017.133.svn16991-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485189" comment="texlive-ogham-2017.133.svn24876-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485190" comment="texlive-oinuit-2017.133.svn28668-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485191" comment="texlive-oinuit-fonts-2017.133.svn28668-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485192" comment="texlive-old-arrows-2017.133.2.0svn42872-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485193" comment="texlive-old-arrows-fonts-2017.133.2.0svn42872-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485194" comment="texlive-oldlatin-2017.133.1.00svn17932-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485195" comment="texlive-oldstandard-2017.133.2.2svn41735-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485196" comment="texlive-oldstandard-fonts-2017.133.2.2svn41735-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485197" comment="texlive-oldstyle-2017.133.0.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485198" comment="texlive-olsak-misc-2017.133.svn41526-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485199" comment="texlive-omega-2017.133.svn33046-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485200" comment="texlive-omega-fonts-2017.133.svn33046-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485201" comment="texlive-omegaware-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486799" comment="texlive-omegaware-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485203" comment="texlive-onlyamsmath-2017.133.0.0.20svn42927-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485204" comment="texlive-onrannual-2017.133.1.1svn17474-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485205" comment="texlive-opcit-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485206" comment="texlive-opensans-2017.133.1.2svn24706-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485207" comment="texlive-opensans-fonts-2017.133.1.2svn24706-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485208" comment="texlive-oplotsymbl-2017.133.1.2svn43091-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485209" comment="texlive-opteng-2017.133.1.0svn27331-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485210" comment="texlive-optidef-2017.133.2.4svn44505-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485211" comment="texlive-optional-2017.133.2.2bsvn18131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485212" comment="texlive-options-2017.133.1.0svn39030-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485213" comment="texlive-ordinalpt-2017.133.2.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485214" comment="texlive-orkhun-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485215" comment="texlive-oscola-2017.133.1.5svn43599-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485216" comment="texlive-ot-tableau-2017.133.svn35095-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485217" comment="texlive-othello-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485218" comment="texlive-othelloboard-2017.133.1.2svn23714-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485219" comment="texlive-otibet-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485220" comment="texlive-oubraces-2017.133.svn21833-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485221" comment="texlive-outline-2017.133.svn18360-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485222" comment="texlive-outliner-2017.133.0.0.94svn21095-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485223" comment="texlive-outlines-2017.133.1.1svn25192-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485224" comment="texlive-overlays-2017.133.2.7svn43431-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485225" comment="texlive-overlock-2017.133.svn34409-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485226" comment="texlive-overlock-fonts-2017.133.svn34409-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485227" comment="texlive-overpic-2017.133.0.0.53svn19712-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485228" comment="texlive-pacioli-2017.133.svn24947-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485229" comment="texlive-padauk-2017.133.3.002svn42617-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485230" comment="texlive-padauk-fonts-2017.133.3.002svn42617-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485231" comment="texlive-pagecolor-2017.133.1.0isvn44487-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485232" comment="texlive-pagecont-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485233" comment="texlive-pagenote-2017.133.1.1asvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485234" comment="texlive-pagerange-2017.133.0.0.5svn16915-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485235" comment="texlive-pageslts-2017.133.1.2fsvn39164-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485236" comment="texlive-palatino-2017.133.svn31835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485237" comment="texlive-palatino-fonts-2017.133.svn31835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485238" comment="texlive-paper-2017.133.1.0lsvn34521-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485239" comment="texlive-papercdcase-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485240" comment="texlive-papermas-2017.133.1.0hsvn23667-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485241" comment="texlive-papertex-2017.133.1.2bsvn19230-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485242" comment="texlive-paracol-2017.133.1.32svn38621-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485243" comment="texlive-parades-2017.133.svn40042-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485244" comment="texlive-paralist-2017.133.2.7svn43021-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485245" comment="texlive-parallel-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485246" comment="texlive-paratype-2017.133.svn32859-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485247" comment="texlive-paratype-fonts-2017.133.svn32859-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485248" comment="texlive-paresse-2017.133.4.1svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485249" comment="texlive-parnotes-2017.133.3svn41868-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485250" comment="texlive-parrun-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485251" comment="texlive-parselines-2017.133.1.4svn21475-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485252" comment="texlive-parskip-2017.133.2.0svn19963-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485253" comment="texlive-pas-cours-2017.133.1.6svn42036-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485254" comment="texlive-pas-crosswords-2017.133.1.03svn32313-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485255" comment="texlive-pas-cv-2017.133.2.01svn32263-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485256" comment="texlive-pas-tableur-2017.133.2.01svn39542-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485257" comment="texlive-passivetex-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485258" comment="texlive-patch-2017.133.svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485259" comment="texlive-patchcmd-2017.133.1.05svn41379-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485260" comment="texlive-patgen-2017.133.2.3svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486800" comment="texlive-patgen-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485262" comment="texlive-patgen2-tutorial-2017.133.svn16490-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485263" comment="texlive-path-2017.133.3.05svn22045-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485264" comment="texlive-pauldoc-2017.133.0.0.5svn16005-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485265" comment="texlive-pawpict-2017.133.1.0svn21629-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485266" comment="texlive-pax-2017.133.0.0.1lsvn26112-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486801" comment="texlive-pax-bin-2017.20170520.svn10843-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485268" comment="texlive-pb-diagram-2017.133.5.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485269" comment="texlive-pbibtex-base-2017.133.svn40986-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485270" comment="texlive-pbox-2017.133.1.2svn24807-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485271" comment="texlive-pbsheet-2017.133.0.0.1svn24830-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485272" comment="texlive-pdf-trans-2017.133.2.4svn32809-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485273" comment="texlive-pdf14-2017.133.0.0.1svn17583-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485274" comment="texlive-pdfbook2-2017.133.1.2svn37537-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486802" comment="texlive-pdfbook2-bin-2017.20170520.svn37537-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485276" comment="texlive-pdfcomment-2017.133.2.4svn41484-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485277" comment="texlive-pdfcprot-2017.133.1.7asvn18735-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485278" comment="texlive-pdfcrop-2017.133.1.37svn29348-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486803" comment="texlive-pdfcrop-bin-2017.20170520.svn14387-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485280" comment="texlive-pdfjam-2017.133.2.02svn29752-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486804" comment="texlive-pdfjam-bin-2017.20170520.svn17868-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485282" comment="texlive-pdflatexpicscale-2017.133.0.0.31svn43117-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486805" comment="texlive-pdflatexpicscale-bin-2017.20170520.svn41779-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485284" comment="texlive-pdfmarginpar-2017.133.0.0.92svn23492-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485285" comment="texlive-pdfpagediff-2017.133.1.4svn37946-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485286" comment="texlive-pdfpages-2017.133.0.0.5hsvn42973-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485287" comment="texlive-pdfscreen-2017.133.1.5svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485288" comment="texlive-pdfslide-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485289" comment="texlive-pdfsync-2017.133.svn20373-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485290" comment="texlive-pdftex-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486806" comment="texlive-pdftex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485292" comment="texlive-pdftex-fonts-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485293" comment="texlive-pdftools-2017.133.0.0.86svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486807" comment="texlive-pdftools-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485295" comment="texlive-pdftricks-2017.133.1.16svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485296" comment="texlive-pdftricks2-2017.133.1.01svn31016-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485297" comment="texlive-pdfwin-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485298" comment="texlive-pdfx-2017.133.1.5.84svn44412-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485299" comment="texlive-pdfxup-2017.133.1.30svn40690-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486808" comment="texlive-pdfxup-bin-2017.20170520.svn40690-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485301" comment="texlive-pecha-2017.133.0.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485302" comment="texlive-pedigree-perl-2017.133.1.0svn31990-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486809" comment="texlive-pedigree-perl-bin-2017.20170520.svn25962-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485304" comment="texlive-perception-2017.133.svn42683-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485305" comment="texlive-perfectcut-2017.133.2.2svn44175-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485306" comment="texlive-perltex-2017.133.2.1svn38719-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486810" comment="texlive-perltex-bin-2017.20170520.svn16181-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485308" comment="texlive-permute-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485309" comment="texlive-persian-bib-2017.133.0.0.9svn37297-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485310" comment="texlive-petiteannonce-2017.133.1.0001svn25915-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485311" comment="texlive-petri-nets-2017.133.svn39165-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486811" comment="texlive-petri-nets-bin-2017.20170520.svn39165-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485313" comment="texlive-pfarrei-2017.133.r36svn31934-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486812" comment="texlive-pfarrei-bin-2017.20170520.svn29348-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485315" comment="texlive-pgf-2017.133.3.0.1asvn44231-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485316" comment="texlive-pgf-blur-2017.133.1.01svn31693-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485317" comment="texlive-pgf-soroban-2017.133.1.1svn32269-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485318" comment="texlive-pgf-spectra-2017.133.1.0svn42986-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485319" comment="texlive-pgf-umlcd-2017.133.0.0.2.1.1svn33307-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485320" comment="texlive-pgf-umlsd-2017.133.0.0.7svn33045-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485321" comment="texlive-pgfgantt-2017.133.4.0svn31037-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485322" comment="texlive-pgfkeyx-2017.133.0.0.0.1svn26093-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485323" comment="texlive-pgfmolbio-2017.133.0.0.21svn35152-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485324" comment="texlive-pgfopts-2017.133.2.1asvn34573-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485325" comment="texlive-pgfornament-2017.133.0.0.21svn39988-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485326" comment="texlive-pgfplots-2017.133.1.15svn44469-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485327" comment="texlive-phaistos-2017.133.1.0svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485328" comment="texlive-phaistos-fonts-2017.133.1.0svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485329" comment="texlive-phffullpagefigure-2017.133.1.0svn41857-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485330" comment="texlive-phfnote-2017.133.1.0svn41858-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485331" comment="texlive-phfparen-2017.133.1.0svn41859-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485332" comment="texlive-phfqit-2017.133.1.0svn41860-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485333" comment="texlive-phfquotetext-2017.133.1.0svn41869-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485334" comment="texlive-phfsvnwatermark-2017.133.1.0svn41870-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485335" comment="texlive-phfthm-2017.133.1.0svn41871-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485336" comment="texlive-philex-2017.133.1.3svn36396-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485337" comment="texlive-philokalia-2017.133.1.1svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485338" comment="texlive-philokalia-fonts-2017.133.1.1svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485339" comment="texlive-philosophersimprint-2017.133.1.4svn41788-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485340" comment="texlive-phonenumbers-2017.133.1.2.1svn43482-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485341" comment="texlive-phonetic-2017.133.svn21871-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485342" comment="texlive-phonrule-2017.133.1.3.2svn43963-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485343" comment="texlive-photo-2017.133.svn18739-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485344" comment="texlive-physics-2017.133.1.3svn28590-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485345" comment="texlive-piano-2017.133.1.0svn21574-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485346" comment="texlive-picinpar-2017.133.1.2asvn20374-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485347" comment="texlive-pict2e-2017.133.0.0.3bsvn39591-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485348" comment="texlive-pictex-2017.133.1.1svn21943-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485349" comment="texlive-pictex2-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485350" comment="texlive-pictexsum-2017.133.svn24965-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485351" comment="texlive-piechartmp-2017.133.0.0.3.0svn19440-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485352" comment="texlive-piff-2017.133.svn21894-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485353" comment="texlive-pigpen-2017.133.0.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485354" comment="texlive-pigpen-fonts-2017.133.0.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485355" comment="texlive-pinlabel-2017.133.1.2svn24769-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485356" comment="texlive-pitex-2017.133.svn24731-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485357" comment="texlive-pittetd-2017.133.1.618svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485358" comment="texlive-pkfix-2017.133.1.7svn26032-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486813" comment="texlive-pkfix-bin-2017.20170520.svn13364-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485360" comment="texlive-pkfix-helper-2017.133.1.4svn29725-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486814" comment="texlive-pkfix-helper-bin-2017.20170520.svn13663-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485362" comment="texlive-pkgloader-2017.133.0.0.5.0svn35711-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485363" comment="texlive-pkuthss-2017.133.1.7.4svn43374-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485364" comment="texlive-pl-2017.133.1.09svn36012-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485365" comment="texlive-pl-fonts-2017.133.1.09svn36012-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485366" comment="texlive-placeat-2017.133.0.0.1svn33526-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485367" comment="texlive-placeins-2017.133.2.2svn19848-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485368" comment="texlive-placeins-plain-2017.133.2.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485369" comment="texlive-plain-2017.133.3.141592653svn43076-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485370" comment="texlive-plain-doc-2017.133.svn28424-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485371" comment="texlive-plainpkg-2017.133.0.0.4asvn27765-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485372" comment="texlive-plantslabels-2017.133.1.0svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485373" comment="texlive-plari-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485374" comment="texlive-plates-2017.133.0.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485375" comment="texlive-platex-2017.133.svn44209-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486815" comment="texlive-platex-bin-2017.20170520.svn22859-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485377" comment="texlive-platex-tools-2017.133.svn44208-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485378" comment="texlive-platexcheat-2017.133.2.0svn42918-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485379" comment="texlive-play-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485380" comment="texlive-playfair-2017.133.svn34236-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485381" comment="texlive-playfair-fonts-2017.133.svn34236-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485382" comment="texlive-plipsum-2017.133.4.3svn30353-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485383" comment="texlive-plnfss-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485384" comment="texlive-plstmary-2017.133.0.0.5csvn31088-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485385" comment="texlive-plweb-2017.133.3.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485386" comment="texlive-pmgraph-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485387" comment="texlive-pmx-2017.133.2.76svn43869-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486816" comment="texlive-pmx-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485389" comment="texlive-pmxchords-2017.133.2.0.2svn39249-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486817" comment="texlive-pmxchords-bin-2017.20170520.svn32405-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485391" comment="texlive-pnas2009-2017.133.1.0svn16287-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485392" comment="texlive-poemscol-2017.133.2.72svn40613-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485393" comment="texlive-poetrytex-2017.133.3.0.1svn39921-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485394" comment="texlive-polski-2017.133.1.3.4svn44213-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485395" comment="texlive-poltawski-2017.133.1.101svn20075-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485396" comment="texlive-poltawski-fonts-2017.133.1.101svn20075-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485397" comment="texlive-polyglossia-2017.133.1.42.4svn40138-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485398" comment="texlive-polynom-2017.133.0.0.18svn42664-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485399" comment="texlive-polynomial-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485400" comment="texlive-polytable-2017.133.0.0.8.2svn31235-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485401" comment="texlive-postcards-2017.133.svn21641-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485402" comment="texlive-poster-mac-2017.133.1.1svn18305-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485403" comment="texlive-powerdot-2017.133.1.5asvn38984-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485404" comment="texlive-powerdot-FUBerlin-2017.133.0.0.01svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485405" comment="texlive-ppr-prv-2017.133.0.0.13csvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485406" comment="texlive-pracjourn-2017.133.0.0.4nsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485407" comment="texlive-preprint-2017.133.2011svn30447-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485408" comment="texlive-prerex-2017.133.svn40613-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485409" comment="texlive-present-2017.133.2.2svn25953-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485410" comment="texlive-presentations-2017.133.svn43949-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485411" comment="texlive-presentations-en-2017.133.svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485412" comment="texlive-pressrelease-2017.133.1.0svn35147-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485413" comment="texlive-prettyref-2017.133.3.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485414" comment="texlive-preview-2017.133.11.90svn44227-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485415" comment="texlive-prftree-2017.133.1.5svn41985-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485416" comment="texlive-printlen-2017.133.1.1asvn19847-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485417" comment="texlive-proba-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485418" comment="texlive-probsoln-2017.133.3.04svn29371-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485419" comment="texlive-procIAGssymp-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485420" comment="texlive-prodint-2017.133.svn21893-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485421" comment="texlive-prodint-fonts-2017.133.svn21893-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485422" comment="texlive-productbox-2017.133.1.1svn20886-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485423" comment="texlive-program-2017.133.3.3.14svn44214-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485424" comment="texlive-progress-2017.133.1.10svn19519-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485425" comment="texlive-progressbar-2017.133.1.0b_4svn33822-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485426" comment="texlive-proofread-2017.133.1.02svn43370-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485427" comment="texlive-prooftrees-2017.133.0.0.6svn43184-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485428" comment="texlive-properties-2017.133.0.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485429" comment="texlive-proposal-2017.133.svn40538-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485430" comment="texlive-prosper-2017.133.1.0hsvn33033-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485431" comment="texlive-protex-2017.133.svn41633-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485432" comment="texlive-protocol-2017.133.1.13svn25562-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485433" comment="texlive-przechlewski-book-2017.133.svn23552-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485434" comment="texlive-ps2pk-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486818" comment="texlive-ps2pk-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485436" comment="texlive-psbao-2017.133.0.0.17svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485437" comment="texlive-pseudocode-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485438" comment="texlive-psfrag-2017.133.3.04svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485439" comment="texlive-psfrag-italian-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485440" comment="texlive-psfragx-2017.133.1.1svn26243-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485441" comment="texlive-psgo-2017.133.0.0.17svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485442" comment="texlive-psizzl-2017.133.0.0.35svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485443" comment="texlive-pslatex-2017.133.svn16416-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485444" comment="texlive-psnfss-2017.133.9.2asvn33946-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485445" comment="texlive-pspicture-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485446" comment="texlive-pst-2dplot-2017.133.1.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485447" comment="texlive-pst-3d-2017.133.1.10svn17257-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485448" comment="texlive-pst-3dplot-2017.133.2.04svn43703-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485449" comment="texlive-pst-abspos-2017.133.0.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485450" comment="texlive-pst-am-2017.133.1.02svn19591-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485451" comment="texlive-pst-arrow-2017.133.0.0.01svn41980-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485452" comment="texlive-pst-asr-2017.133.1.3svn22138-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485453" comment="texlive-pst-bar-2017.133.0.0.92svn18734-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485454" comment="texlive-pst-barcode-2017.133.0.0.16asvn43996-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485455" comment="texlive-pst-bezier-2017.133.0.0.03svn41981-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485456" comment="texlive-pst-blur-2017.133.2.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485457" comment="texlive-pst-bspline-2017.133.1.62svn40685-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485458" comment="texlive-pst-calendar-2017.133.0.0.47svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485459" comment="texlive-pst-cie-2017.133.1.05svn41223-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485460" comment="texlive-pst-circ-2017.133.2.14svn41901-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485461" comment="texlive-pst-coil-2017.133.1.07svn37377-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485462" comment="texlive-pst-cox-2017.133.0.0.98_betasvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485463" comment="texlive-pst-dbicons-2017.133.0.0.16svn17556-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485464" comment="texlive-pst-diffraction-2017.133.2.03svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485465" comment="texlive-pst-electricfield-2017.133.0.0.14svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485466" comment="texlive-pst-eps-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485467" comment="texlive-pst-eucl-2017.133.1.56svn43911-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485468" comment="texlive-pst-eucl-translation-bg-2017.133.1.3.2svn19296-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485469" comment="texlive-pst-exa-2017.133.0.0.05svn35248-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485470" comment="texlive-pst-fill-2017.133.1.01svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485471" comment="texlive-pst-fit-2017.133.0.0.01svn28155-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485472" comment="texlive-pst-fr3d-2017.133.1.10svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485473" comment="texlive-pst-fractal-2017.133.0.0.06svn16958-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485474" comment="texlive-pst-fun-2017.133.0.0.04svn17909-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485475" comment="texlive-pst-func-2017.133.0.0.85svn43912-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485476" comment="texlive-pst-gantt-2017.133.0.0.22asvn35832-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485477" comment="texlive-pst-geo-2017.133.0.0.06svn44131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485478" comment="texlive-pst-ghsb-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485479" comment="texlive-pst-gr3d-2017.133.1.34svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485480" comment="texlive-pst-grad-2017.133.1.06svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485481" comment="texlive-pst-graphicx-2017.133.0.0.02svn21717-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485482" comment="texlive-pst-infixplot-2017.133.0.0.11svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485483" comment="texlive-pst-intersect-2017.133.0.0.4svn33210-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485484" comment="texlive-pst-jtree-2017.133.2.6svn20946-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485485" comment="texlive-pst-knot-2017.133.0.0.2svn16033-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485486" comment="texlive-pst-labo-2017.133.2.04svn39077-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485487" comment="texlive-pst-layout-2017.133.0.0.95svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485488" comment="texlive-pst-lens-2017.133.1.02svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485489" comment="texlive-pst-light3d-2017.133.0.0.12svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485490" comment="texlive-pst-magneticfield-2017.133.1.13svn18922-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485491" comment="texlive-pst-math-2017.133.0.0.63svn34786-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485492" comment="texlive-pst-mirror-2017.133.1.01svn32997-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485493" comment="texlive-pst-node-2017.133.1.39svn43015-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485494" comment="texlive-pst-ob3d-2017.133.0.0.21svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485495" comment="texlive-pst-ode-2017.133.0.0.7svn35418-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485496" comment="texlive-pst-optexp-2017.133.5.2svn35673-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485497" comment="texlive-pst-optic-2017.133.1.02svn41999-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485498" comment="texlive-pst-osci-2017.133.2.82svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485499" comment="texlive-pst-ovl-2017.133.0.0.07svn40873-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485500" comment="texlive-pst-pad-2017.133.0.0.3bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485501" comment="texlive-pst-pdf-2017.133.1.2csvn44047-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486819" comment="texlive-pst-pdf-bin-2017.20170520.svn7838-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485503" comment="texlive-pst-pdgr-2017.133.0.0.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485504" comment="texlive-pst-perspective-2017.133.1.05svn39585-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485505" comment="texlive-pst-platon-2017.133.0.0.01svn16538-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485506" comment="texlive-pst-plot-2017.133.1.79svn44511-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485507" comment="texlive-pst-poly-2017.133.1.63svn35062-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485508" comment="texlive-pst-pulley-2017.133.0.0.01svn25142-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485509" comment="texlive-pst-qtree-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485510" comment="texlive-pst-rubans-2017.133.1.2svn23464-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485511" comment="texlive-pst-shell-2017.133.0.0.03svn42840-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485512" comment="texlive-pst-sigsys-2017.133.1.4svn21667-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485513" comment="texlive-pst-slpe-2017.133.1.31svn24391-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485514" comment="texlive-pst-solarsystem-2017.133.0.0.12svn24995-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485515" comment="texlive-pst-solides3d-2017.133.4.32asvn43401-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485516" comment="texlive-pst-soroban-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485517" comment="texlive-pst-spectra-2017.133.0.0.91svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485518" comment="texlive-pst-spinner-2017.133.1.02svn44507-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485519" comment="texlive-pst-spirograph-2017.133.0.0.41svn35026-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485520" comment="texlive-pst-stru-2017.133.0.0.13svn38613-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485521" comment="texlive-pst-support-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485522" comment="texlive-pst-text-2017.133.1.00svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485523" comment="texlive-pst-thick-2017.133.1.0svn16369-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485524" comment="texlive-pst-tools-2017.133.0.0.06svn44320-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485525" comment="texlive-pst-tree-2017.133.1.13svn43272-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485526" comment="texlive-pst-tvz-2017.133.1.01svn23451-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485527" comment="texlive-pst-uml-2017.133.0.0.83svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485528" comment="texlive-pst-vectorian-2017.133.0.0.4svn28801-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485529" comment="texlive-pst-vehicle-2017.133.1.1svn44466-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485530" comment="texlive-pst-vowel-2017.133.1.0svn25228-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485531" comment="texlive-pst-vue3d-2017.133.1.24svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485532" comment="texlive-pst2pdf-2017.133.0.0.16svn35247-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486820" comment="texlive-pst2pdf-bin-2017.20170520.svn29333-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485534" comment="texlive-pstool-2017.133.1.5csvn34015-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485535" comment="texlive-pstools-2017.133.1.68svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486821" comment="texlive-pstools-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485537" comment="texlive-pstricks-2017.133.2.73asvn44506-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485538" comment="texlive-pstricks-add-2017.133.3.83svn44281-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485539" comment="texlive-pstricks_calcnotes-2017.133.1.2svn34363-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485540" comment="texlive-pstring-2017.133.svn42857-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485541" comment="texlive-psu-thesis-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485542" comment="texlive-ptex-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485543" comment="texlive-ptex-base-2017.133.svn43899-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486822" comment="texlive-ptex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485545" comment="texlive-ptex-fontmaps-2017.133.20170114.0svn44206-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486823" comment="texlive-ptex-fontmaps-bin-2017.20170520.svn44206-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485547" comment="texlive-ptex-fonts-2017.133.svn42950-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485548" comment="texlive-ptex-fonts-fonts-2017.133.svn42950-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485549" comment="texlive-ptex2pdf-2017.133.20170604.0svn44470-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486824" comment="texlive-ptex2pdf-bin-2017.20170520.svn29335-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486825" comment="texlive-ptexenc-devel-1.3.5-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485552" comment="texlive-ptext-2017.133.1.1svn30171-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485553" comment="texlive-ptptex-2017.133.0.0.91svn19440-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485554" comment="texlive-punk-2017.133.svn27388-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485555" comment="texlive-punk-latex-2017.133.1.1svn27389-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485556" comment="texlive-punknova-2017.133.1.003svn24649-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485557" comment="texlive-punknova-fonts-2017.133.1.003svn24649-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485558" comment="texlive-purifyeps-2017.133.1.1svn29725-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486826" comment="texlive-purifyeps-bin-2017.20170520.svn13663-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485560" comment="texlive-pxbase-2017.133.1.1svn44482-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485561" comment="texlive-pxchfon-2017.133.1.0svn44459-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485562" comment="texlive-pxcjkcat-2017.133.1.0svn27780-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485563" comment="texlive-pxfonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485564" comment="texlive-pxfonts-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485565" comment="texlive-pxgreeks-2017.133.1.0svn21838-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485566" comment="texlive-pxjahyper-2017.133.0.0.3svn40612-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485567" comment="texlive-pxpgfmark-2017.133.0.0.2svn30212-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485568" comment="texlive-pxrubrica-2017.133.1.3asvn44225-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485569" comment="texlive-pxtatescale-2017.133.0.0.4svn43009-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485570" comment="texlive-pxtxalfa-2017.133.1svn23682-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485571" comment="texlive-pygmentex-2017.133.0.0.8svn34996-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486827" comment="texlive-pygmentex-bin-2017.20170520.svn34996-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485573" comment="texlive-python-2017.133.0.0.21svn27064-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485574" comment="texlive-pythonhighlight-2017.133.svn43191-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485575" comment="texlive-pythontex-2017.133.0.0.15svn41746-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486828" comment="texlive-pythontex-bin-2017.20170520.svn31638-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485577" comment="texlive-qcircuit-2017.133.2.5.3svn42816-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485578" comment="texlive-qcm-2017.133.2.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485579" comment="texlive-qobitree-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485580" comment="texlive-qpxqtx-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485581" comment="texlive-qrcode-2017.133.1.51svn36065-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485582" comment="texlive-qstest-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485583" comment="texlive-qsymbols-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485584" comment="texlive-qtree-2017.133.3.1bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485585" comment="texlive-quattrocento-2017.133.svn31763-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485586" comment="texlive-quattrocento-fonts-2017.133.svn31763-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485587" comment="texlive-quicktype-2017.133.0.0.1svn42183-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485588" comment="texlive-quotchap-2017.133.1.1svn28046-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485589" comment="texlive-quoting-2017.133.0.0.1csvn32818-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485590" comment="texlive-quotmark-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485591" comment="texlive-quran-2017.133.1.252svn43360-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485592" comment="texlive-r_und_s-2017.133.1.3isvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485593" comment="texlive-raleway-2017.133.1.4svn42629-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485594" comment="texlive-raleway-fonts-2017.133.1.4svn42629-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485595" comment="texlive-ran_toks-2017.133.1.1svn44429-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485596" comment="texlive-randbild-2017.133.0.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485597" comment="texlive-randomlist-2017.133.1.2svn41727-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485598" comment="texlive-randomwalk-2017.133.0.0.4svn38418-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485599" comment="texlive-randtext-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485600" comment="texlive-rccol-2017.133.1.2csvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485601" comment="texlive-rcs-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485602" comment="texlive-rcs-multi-2017.133.0.0.1asvn21939-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485603" comment="texlive-rcsinfo-2017.133.1.11svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485604" comment="texlive-readarray-2017.133.2.0svn42467-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485605" comment="texlive-realboxes-2017.133.0.0.2svn23581-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485606" comment="texlive-realscripts-2017.133.0.0.3dsvn39706-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485607" comment="texlive-rec-thy-2017.133.1.3svn27225-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485608" comment="texlive-recipe-2017.133.0.0.9svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485609" comment="texlive-recipebook-2017.133.svn37026-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485610" comment="texlive-recipecard-2017.133.2.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485611" comment="texlive-rectopma-2017.133.svn19980-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485612" comment="texlive-recycle-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485613" comment="texlive-recycle-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485614" comment="texlive-refcheck-2017.133.1.9.1svn29128-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485615" comment="texlive-refenums-2017.133.1.1.2svn44131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485616" comment="texlive-reflectgraphics-2017.133.0.0.2csvn40612-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485617" comment="texlive-refman-2017.133.2.0esvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485618" comment="texlive-refstyle-2017.133.0.0.5svn20318-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485619" comment="texlive-regcount-2017.133.1.0svn19979-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485620" comment="texlive-regexpatch-2017.133.0.0.2bsvn41204-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485621" comment="texlive-register-2017.133.1.6svn21127-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485622" comment="texlive-regstats-2017.133.1.0hsvn25050-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485623" comment="texlive-reledmac-2017.133.2.22.0svn44545-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485624" comment="texlive-relenc-2017.133.svn22050-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485625" comment="texlive-relsize-2017.133.4.1svn30707-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485626" comment="texlive-reotex-2017.133.1.1svn34924-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485627" comment="texlive-repeatindex-2017.133.0.0.01svn24305-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485628" comment="texlive-repere-2017.133.17.05svn44298-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485629" comment="texlive-repltext-2017.133.1.0svn33442-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485630" comment="texlive-resphilosophica-2017.133.1.31svn43631-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485631" comment="texlive-resumecls-2017.133.0.0.3.2svn38427-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485632" comment="texlive-resumemac-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485633" comment="texlive-reverxii-2017.133.svn24976-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485634" comment="texlive-revquantum-2017.133.0.0.11svn43505-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485635" comment="texlive-revtex-2017.133.4.1rsvn19652-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485636" comment="texlive-revtex4-2017.133.svn16488-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485637" comment="texlive-ribbonproofs-2017.133.1.0svn31137-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485638" comment="texlive-rjlparshap-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485639" comment="texlive-rlepsf-2017.133.svn19082-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485640" comment="texlive-rmathbr-2017.133.1.0.3svn40415-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485641" comment="texlive-rmpage-2017.133.0.0.92svn20002-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485642" comment="texlive-roboto-2017.133.svn38386-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485643" comment="texlive-roboto-fonts-2017.133.svn38386-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485644" comment="texlive-robustcommand-2017.133.0.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485645" comment="texlive-robustindex-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485646" comment="texlive-roex-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485647" comment="texlive-romanbar-2017.133.1.0fsvn25005-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485648" comment="texlive-romanbarpagenumber-2017.133.1.0svn36236-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485649" comment="texlive-romande-2017.133.1.008_v7_scsvn19537-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485650" comment="texlive-romande-fonts-2017.133.1.008_v7_scsvn19537-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485651" comment="texlive-romanneg-2017.133.svn20087-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485652" comment="texlive-romannum-2017.133.1.0bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485653" comment="texlive-rosario-2017.133.1.0svn40843-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485654" comment="texlive-rosario-fonts-2017.133.1.0svn40843-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485655" comment="texlive-rotfloat-2017.133.1.2svn18292-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485656" comment="texlive-rotpages-2017.133.3.0svn18740-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485657" comment="texlive-roundbox-2017.133.0.0.2svn29675-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485658" comment="texlive-roundrect-2017.133.2.2svn39796-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485659" comment="texlive-rputover-2017.133.1.0svn43624-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485660" comment="texlive-rrgtrees-2017.133.1.1svn27322-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485661" comment="texlive-rsc-2017.133.3.1fsvn41923-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485662" comment="texlive-rsfs-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485663" comment="texlive-rsfs-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485664" comment="texlive-rsfso-2017.133.1.02svn37965-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485665" comment="texlive-rterface-2017.133.svn30084-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485666" comment="texlive-rtkinenc-2017.133.1.0svn20003-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485667" comment="texlive-rtklage-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485668" comment="texlive-rubik-2017.133.4.0svn44131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486829" comment="texlive-rubik-bin-2017.20170520.svn32919-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485670" comment="texlive-ruhyphen-2017.133.1.6svn21081-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485671" comment="texlive-rulercompass-2017.133.1svn32392-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485672" comment="texlive-russ-2017.133.svn25209-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485673" comment="texlive-rutitlepage-2017.133.1.0svn44485-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485674" comment="texlive-rviewport-2017.133.1.0svn23739-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485675" comment="texlive-rvwrite-2017.133.1.2svn19614-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485676" comment="texlive-ryethesis-2017.133.1.36svn33945-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485677" comment="texlive-sa-tikz-2017.133.0.0.7asvn32815-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485678" comment="texlive-sageep-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485679" comment="texlive-sanitize-umlaut-2017.133.1.00svn41365-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485680" comment="texlive-sanskrit-2017.133.2.2.1svn42925-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485681" comment="texlive-sanskrit-t1-2017.133.svn35737-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485682" comment="texlive-sanskrit-t1-fonts-2017.133.svn35737-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485683" comment="texlive-sansmath-2017.133.1.1svn17997-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485684" comment="texlive-sansmathaccent-2017.133.svn30187-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485685" comment="texlive-sansmathfonts-2017.133.svn43252-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485686" comment="texlive-sansmathfonts-fonts-2017.133.svn43252-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485687" comment="texlive-sapthesis-2017.133.3.8svn39014-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485688" comment="texlive-sasnrdisplay-2017.133.0.0.93svn33120-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485689" comment="texlive-sauerj-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485690" comment="texlive-sauter-2017.133.2.4svn13293-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485691" comment="texlive-sauterfonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485692" comment="texlive-savefnmark-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485693" comment="texlive-savesym-2017.133.1.2svn31565-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485694" comment="texlive-savetrees-2017.133.2.4svn40525-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485695" comment="texlive-scale-2017.133.1.1.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485696" comment="texlive-scalebar-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485697" comment="texlive-scalerel-2017.133.1.8svn42809-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485698" comment="texlive-scanpages-2017.133.1.05asvn42633-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485699" comment="texlive-scanpages-fonts-2017.133.1.05asvn42633-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485700" comment="texlive-schemabloc-2017.133.1.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485701" comment="texlive-schemata-2017.133.0.0.8svn39510-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485702" comment="texlive-schule-2017.133.0.0.6svn37277-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485703" comment="texlive-schulschriften-2017.133.4svn35730-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485704" comment="texlive-schwalbe-chess-2017.133.2.1svn39318-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485705" comment="texlive-sciposter-2017.133.1.18svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485706" comment="texlive-sclang-prettifier-2017.133.0.0.1svn35087-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485707" comment="texlive-scratch-2017.133.0.0.2svn44490-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485708" comment="texlive-screenplay-2017.133.1.6svn27223-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485709" comment="texlive-screenplay-pkg-2017.133.1.0svn37893-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485710" comment="texlive-scrjrnl-2017.133.0.0.1svn27810-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485711" comment="texlive-scrlttr2copy-2017.133.0.0.1dsvn39734-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485712" comment="texlive-scsnowman-2017.133.1.1svn43017-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485713" comment="texlive-sdrt-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485714" comment="texlive-sduthesis-2017.133.1.2.1svn41401-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485715" comment="texlive-secdot-2017.133.1.0svn20208-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485716" comment="texlive-section-2017.133.svn20180-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485717" comment="texlive-sectionbox-2017.133.1.01svn37749-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485718" comment="texlive-sectsty-2017.133.2.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485719" comment="texlive-seealso-2017.133.1.2svn43595-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485720" comment="texlive-seetexk-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486830" comment="texlive-seetexk-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485722" comment="texlive-selectp-2017.133.1.0svn20185-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485723" comment="texlive-selnolig-2017.133.0.0.302svn38721-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485724" comment="texlive-semantic-2017.133.2.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485725" comment="texlive-semantic-markup-2017.133.svn42374-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485726" comment="texlive-semaphor-2017.133.svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485727" comment="texlive-semaphor-fonts-2017.133.svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485728" comment="texlive-seminar-2017.133.1.62svn34011-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485729" comment="texlive-semioneside-2017.133.0.0.41svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485730" comment="texlive-semproc-2017.133.0.0.1svn37568-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485731" comment="texlive-sepfootnotes-2017.133.0.0.3csvn41732-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485732" comment="texlive-sepnum-2017.133.2.0svn20186-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485733" comment="texlive-seqsplit-2017.133.0.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485734" comment="texlive-serbian-apostrophe-2017.133.svn23799-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485735" comment="texlive-serbian-date-lat-2017.133.svn23446-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485736" comment="texlive-serbian-def-cyr-2017.133.svn23734-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485737" comment="texlive-serbian-lig-2017.133.svn39096-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485738" comment="texlive-sesamanuel-2017.133.0.0.6svn36613-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485739" comment="texlive-sesstime-2017.133.1.0svn44157-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485740" comment="texlive-setdeck-2017.133.0.0.1svn40613-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485741" comment="texlive-setspace-2017.133.6.7asvn24881-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485742" comment="texlive-seuthesis-2017.133.2.1.2svn33042-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485743" comment="texlive-seuthesix-2017.133.1.0.1svn40088-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485744" comment="texlive-sf298-2017.133.1.3svn41653-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485745" comment="texlive-sffms-2017.133.2.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485746" comment="texlive-sfg-2017.133.0.0.91svn20209-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485747" comment="texlive-sfmath-2017.133.0.0.8svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485748" comment="texlive-sgame-2017.133.2.15svn30959-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485749" comment="texlive-shade-2017.133.1svn22212-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485750" comment="texlive-shadethm-2017.133.svn20319-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485751" comment="texlive-shadow-2017.133.svn20312-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485752" comment="texlive-shadowtext-2017.133.0.0.3svn26522-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485753" comment="texlive-shapepar-2017.133.2.2svn30708-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485754" comment="texlive-shapes-2017.133.1.1svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485755" comment="texlive-shdoc-2017.133.2.1bsvn41991-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485756" comment="texlive-shipunov-2017.133.1.1svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485757" comment="texlive-shorttoc-2017.133.1.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485758" comment="texlive-show2e-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485759" comment="texlive-showcharinbox-2017.133.0.0.1svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485760" comment="texlive-showdim-2017.133.1.2svn28918-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485761" comment="texlive-showexpl-2017.133.0.0.3osvn42677-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485762" comment="texlive-showhyphens-2017.133.0.0.5csvn39787-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485763" comment="texlive-showlabels-2017.133.1.8svn41322-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485764" comment="texlive-showtags-2017.133.1.05svn20336-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485765" comment="texlive-shuffle-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485766" comment="texlive-sidecap-2017.133.1.6fsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485767" comment="texlive-sidenotes-2017.133.1.00svn40658-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485768" comment="texlive-sides-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485769" comment="texlive-signchart-2017.133.1.01svn39707-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485770" comment="texlive-silence-2017.133.1.5bsvn27028-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485771" comment="texlive-simple-resume-cv-2017.133.svn43057-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485772" comment="texlive-simple-thesis-dissertation-2017.133.svn43058-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485773" comment="texlive-simplecd-2017.133.1.4svn29260-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485774" comment="texlive-simplecv-2017.133.1.6asvn35537-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485775" comment="texlive-simpler-wick-2017.133.1.0.0svn39074-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485776" comment="texlive-simplewick-2017.133.1.2asvn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485777" comment="texlive-simplified-latex-2017.133.svn20620-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485778" comment="texlive-simurgh-2017.133.0.0.01bsvn31719-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485779" comment="texlive-sitem-2017.133.1.0svn22136-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485780" comment="texlive-siunitx-2017.133.2.7gsvn44428-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485781" comment="texlive-skak-2017.133.1.5.2svn32758-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485782" comment="texlive-skaknew-2017.133.svn20031-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485783" comment="texlive-skaknew-fonts-2017.133.svn20031-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485784" comment="texlive-skb-2017.133.0.0.52svn22781-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485785" comment="texlive-skdoc-2017.133.1.5svn43170-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485786" comment="texlive-skeycommand-2017.133.0.0.4svn24652-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485787" comment="texlive-skeyval-2017.133.1.3svn30560-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485788" comment="texlive-skmath-2017.133.0.0.4bsvn42902-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485789" comment="texlive-skrapport-2017.133.0.0.12gsvn42903-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485790" comment="texlive-skull-2017.133.0.0.1svn25608-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485791" comment="texlive-slantsc-2017.133.2.11svn25007-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485792" comment="texlive-slideshow-2017.133.1.0svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485793" comment="texlive-smalltableof-2017.133.svn20333-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485794" comment="texlive-smartdiagram-2017.133.0.0.3bsvn42781-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485795" comment="texlive-smartref-2017.133.1.9svn20311-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485796" comment="texlive-smartunits-2017.133.1.2svn39592-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485797" comment="texlive-snapshot-2017.133.1.14svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485798" comment="texlive-snotez-2017.133.0.0.3svn30355-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485799" comment="texlive-songbook-2017.133.4.5svn18136-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485800" comment="texlive-songs-2017.133.3.0svn44553-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485801" comment="texlive-sort-by-letters-2017.133.svn27128-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485802" comment="texlive-soton-2017.133.0.0.1svn16215-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485803" comment="texlive-soul-2017.133.2.4svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485804" comment="texlive-soup-2017.133.1.0svn42992-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485805" comment="texlive-sourcecodepro-2017.133.2.6svn40597-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485806" comment="texlive-sourcecodepro-fonts-2017.133.2.6svn40597-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485807" comment="texlive-sourcesanspro-2017.133.2.6svn42852-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485808" comment="texlive-sourcesanspro-fonts-2017.133.2.6svn42852-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485809" comment="texlive-sourceserifpro-2017.133.1.2svn40598-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485810" comment="texlive-sourceserifpro-fonts-2017.133.1.2svn40598-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485811" comment="texlive-spalign-2017.133.svn42225-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485812" comment="texlive-spanish-mx-2017.133.1.1asvn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485813" comment="texlive-sparklines-2017.133.1.7svn42821-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485814" comment="texlive-spath3-2017.133.1.1svn39794-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485815" comment="texlive-spelling-2017.133.0.0.41svn30715-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485816" comment="texlive-sphdthesis-2017.133.1.0svn34374-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485817" comment="texlive-spie-2017.133.3.25svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485818" comment="texlive-splines-2017.133.0.0.2svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485819" comment="texlive-splitbib-2017.133.1.17svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485820" comment="texlive-splitindex-2017.133.1.2csvn39766-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486831" comment="texlive-splitindex-bin-2017.20170520.svn29688-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485822" comment="texlive-spot-2017.133.1.1svn22408-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485823" comment="texlive-spotcolor-2017.133.1.2svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485824" comment="texlive-spreadtab-2017.133.0.0.4csvn35531-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485825" comment="texlive-spverbatim-2017.133.1.0svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485826" comment="texlive-sr-vorl-2017.133.1.1svn39529-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485827" comment="texlive-srbook-mem-2017.133.svn23454-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485828" comment="texlive-srcltx-2017.133.1.6svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485829" comment="texlive-srcredact-2017.133.1.0svn38710-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486832" comment="texlive-srcredact-bin-2017.20170520.svn38710-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485831" comment="texlive-sseq-2017.133.2.01svn31585-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485832" comment="texlive-sslides-2017.133.svn32293-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485833" comment="texlive-stack-2017.133.1.00svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485834" comment="texlive-stackengine-2017.133.4.01svn43221-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485835" comment="texlive-stage-2017.133.1.00svn44100-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485836" comment="texlive-standalone-2017.133.1.2svn37875-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485837" comment="texlive-stanli-2017.133.3.0svn42765-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485838" comment="texlive-starfont-2017.133.1.2svn19982-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485839" comment="texlive-starfont-fonts-2017.133.1.2svn19982-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485840" comment="texlive-startex-2017.133.1.04svn35718-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485841" comment="texlive-statex-2017.133.1.6svn20306-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485842" comment="texlive-statex2-2017.133.2.1svn23961-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485843" comment="texlive-statistik-2017.133.0.0.03svn20334-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485844" comment="texlive-staves-2017.133.svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485845" comment="texlive-staves-fonts-2017.133.svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485846" comment="texlive-stdclsdv-2017.133.1.1asvn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485847" comment="texlive-stdpage-2017.133.0.0.6svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485848" comment="texlive-steinmetz-2017.133.1.0svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485849" comment="texlive-stellenbosch-2017.133.11asvn36696-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485850" comment="texlive-stex-2017.133.svn40320-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485851" comment="texlive-stix-2017.133.1.1.2svn36914-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485852" comment="texlive-stix-fonts-2017.133.1.1.2svn36914-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485853" comment="texlive-stmaryrd-2017.133.svn22027-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485854" comment="texlive-stmaryrd-fonts-2017.133.svn22027-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485855" comment="texlive-storebox-2017.133.1.3asvn24895-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485856" comment="texlive-storecmd-2017.133.0.0.0.2svn24431-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485857" comment="texlive-stringstrings-2017.133.1.23svn36203-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485858" comment="texlive-struktex-2017.133.141svn25916-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485859" comment="texlive-sttools-2017.133.2.0svn43684-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485860" comment="texlive-stubs-2017.133.0.0.1.1svn19440-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485861" comment="texlive-studenthandouts-2017.133.1.0svn43516-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485862" comment="texlive-sty2dtx-2017.133.2.3svn29743-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486833" comment="texlive-sty2dtx-bin-2017.20170520.svn21215-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485864" comment="texlive-suanpan-2017.133.svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485865" comment="texlive-subdepth-2017.133.0.0.1svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485866" comment="texlive-subeqn-2017.133.2.0bsvn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485867" comment="texlive-subeqnarray-2017.133.2.1csvn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485868" comment="texlive-subfig-2017.133.1.3svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485869" comment="texlive-subfigmat-2017.133.1.0svn20308-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485870" comment="texlive-subfigure-2017.133.2.1.5svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485871" comment="texlive-subfiles-2017.133.1.1svn26645-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485872" comment="texlive-subfloat-2017.133.2.14svn29349-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485873" comment="texlive-substances-2017.133.0.0.2asvn40989-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485874" comment="texlive-substitutefont-2017.133.0.0.1.4svn32066-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485875" comment="texlive-substr-2017.133.1.2svn16117-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485876" comment="texlive-subsupscripts-2017.133.1.0svn16080-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485877" comment="texlive-sudoku-2017.133.1.0svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485878" comment="texlive-sudokubundle-2017.133.1.0asvn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485879" comment="texlive-suftesi-2017.133.2.9svn40238-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485880" comment="texlive-sugconf-2017.133.svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485881" comment="texlive-superiors-2017.133.1.05svn36422-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485882" comment="texlive-superiors-fonts-2017.133.1.05svn36422-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485883" comment="texlive-supertabular-2017.133.4.1asvn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485884" comment="texlive-susy-2017.133.svn19440-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485885" comment="texlive-svg-2017.133.2.00bsvn44503-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485886" comment="texlive-svg-inkscape-2017.133.svn32199-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485887" comment="texlive-svgcolor-2017.133.1.0svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485888" comment="texlive-svn-2017.133.43svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485889" comment="texlive-svn-multi-2017.133.2.4dsvn26313-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486834" comment="texlive-svn-multi-bin-2017.20170520.svn13663-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485891" comment="texlive-svn-prov-2017.133.3.1862svn18017-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485892" comment="texlive-svninfo-2017.133.0.0.7.4svn17554-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485893" comment="texlive-svrsymbols-2017.133.2.0asvn40371-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485894" comment="texlive-svrsymbols-fonts-2017.133.2.0asvn40371-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485895" comment="texlive-swebib-2017.133.svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485896" comment="texlive-swimgraf-2017.133.svn25446-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485897" comment="texlive-syllogism-2017.133.1.2svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485898" comment="texlive-symbol-2017.133.svn31835-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485899" comment="texlive-symbol-fonts-2017.133.svn31835-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485900" comment="texlive-sympytexpackage-2017.133.svn41190-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485901" comment="texlive-synctex-2017.133.svn44166-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486835" comment="texlive-synctex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486836" comment="texlive-synctex-devel-1.18-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485904" comment="texlive-synproof-2017.133.1.0svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485905" comment="texlive-syntax-2017.133.svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485906" comment="texlive-syntrace-2017.133.1.1svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485907" comment="texlive-synttree-2017.133.1.4.2svn16252-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485908" comment="texlive-systeme-2017.133.0.0.3svn32473-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485909" comment="texlive-t-angles-2017.133.svn15878-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485910" comment="texlive-t2-2017.133.svn39024-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485911" comment="texlive-tabfigures-2017.133.1.1svn25202-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485912" comment="texlive-table-fct-2017.133.1.1svn41849-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485913" comment="texlive-tableaux-2017.133.svn42413-4.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485914" comment="texlive-tablefootnote-2017.134.1.1csvn32804-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485915" comment="texlive-tableof-2017.134.1.4asvn36489-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485916" comment="texlive-tablestyles-2017.134.svn34495-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485917" comment="texlive-tablists-2017.134.0.0.0esvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485918" comment="texlive-tablor-2017.134.4.07_gsvn31855-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485919" comment="texlive-tabls-2017.134.3.5svn17255-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485920" comment="texlive-tabriz-thesis-2017.134.1.1svn29421-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485921" comment="texlive-tabstackengine-2017.134.2.01svn42610-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485922" comment="texlive-tabto-generic-2017.134.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485923" comment="texlive-tabto-ltx-2017.134.1.3svn30710-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485924" comment="texlive-tabu-2017.134.2.8svn21534-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485925" comment="texlive-tabularborder-2017.134.1.0asvn17885-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485926" comment="texlive-tabularcalc-2017.134.0.0.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485927" comment="texlive-tabularew-2017.134.0.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485928" comment="texlive-tabulars-e-2017.134.1.0svn21191-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485929" comment="texlive-tabulary-2017.134.0.0.10svn34368-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485930" comment="texlive-tabvar-2017.134.1.7svn28908-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485931" comment="texlive-tabvar-fonts-2017.134.1.7svn28908-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485932" comment="texlive-tagging-2017.134.svn23761-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485933" comment="texlive-tagpair-2017.134.1.1svn42138-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485934" comment="texlive-talk-2017.134.1.1svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485935" comment="texlive-tamefloats-2017.134.0.0.42svn27345-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485936" comment="texlive-tamethebeast-2017.134.1.4svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485937" comment="texlive-tap-2017.134.0.0.77svn31731-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485938" comment="texlive-tapir-2017.134.0.0.2svn20484-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485939" comment="texlive-tapir-fonts-2017.134.0.0.2svn20484-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485940" comment="texlive-tasks-2017.134.0.0.12svn41851-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485941" comment="texlive-tcldoc-2017.134.2.40svn22018-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485942" comment="texlive-tcolorbox-2017.134.4.03svn44046-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485943" comment="texlive-tdclock-2017.134.2.5svn33043-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485944" comment="texlive-tds-2017.134.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485945" comment="texlive-tdsfrmath-2017.134.1.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485946" comment="texlive-technics-2017.134.1.0svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485947" comment="texlive-ted-2017.134.1.06svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485948" comment="texlive-templates-fenn-2017.134.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485949" comment="texlive-templates-sommer-2017.134.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485950" comment="texlive-templatetools-2017.134.svn34495-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485951" comment="texlive-tempora-2017.134.1.05svn39596-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485952" comment="texlive-tempora-fonts-2017.134.1.05svn39596-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485953" comment="texlive-tengwarscript-2017.134.1.3.1svn34594-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485954" comment="texlive-tensor-2017.134.2.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485955" comment="texlive-termcal-2017.134.1.8svn22514-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485956" comment="texlive-termlist-2017.134.1.1svn18923-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485957" comment="texlive-termmenu-2017.134.svn37700-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485958" comment="texlive-testhyphens-2017.134.0.0.7svn38928-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485959" comment="texlive-testidx-2017.134.1.0svn42294-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485960" comment="texlive-tetex-2017.134.3.0svn44331-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486837" comment="texlive-tetex-bin-2017.20170520.svn43957-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485962" comment="texlive-teubner-2017.134.4.8svn40197-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485963" comment="texlive-tex-2017.134.3.14159265svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486838" comment="texlive-tex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485965" comment="texlive-tex-ewd-2017.134.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485966" comment="texlive-tex-font-errors-cheatsheet-2017.134.0.0.1svn18314-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485967" comment="texlive-tex-gyre-2017.134.2.004svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485968" comment="texlive-tex-gyre-fonts-2017.134.2.004svn18651-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485969" comment="texlive-tex-gyre-math-2017.134.svn41264-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485970" comment="texlive-tex-gyre-math-fonts-2017.134.svn41264-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485971" comment="texlive-tex-ini-files-2017.134.svn40533-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485972" comment="texlive-tex-label-2017.134.svn16372-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485973" comment="texlive-tex-overview-2017.134.0.0.2svn41403-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485974" comment="texlive-tex-ps-2017.134.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485975" comment="texlive-tex-refs-2017.134.0.0.4.8svn44131-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485976" comment="texlive-tex-virtual-academy-pl-2017.134.svn34177-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485977" comment="texlive-tex4ebook-2017.134.0.0.1esvn44103-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486839" comment="texlive-tex4ebook-bin-2017.20170520.svn37771-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485979" comment="texlive-tex4ht-2017.134.svn44379-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486840" comment="texlive-tex4ht-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485981" comment="texlive-texapi-2017.134.1.04svn24237-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485982" comment="texlive-texbytopic-2017.134.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485983" comment="texlive-texconfig-2017.134.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486841" comment="texlive-texconfig-bin-2017.20170520.svn29741-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485985" comment="texlive-texcount-2017.134.3.0svn31323-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486842" comment="texlive-texcount-bin-2017.20170520.svn13013-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485987" comment="texlive-texdef-2017.134.1.7bsvn26420-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486843" comment="texlive-texdef-bin-2017.20170520.svn21802-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485989" comment="texlive-texdiff-2017.134.0.0.4svn29752-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486844" comment="texlive-texdiff-bin-2017.20170520.svn15506-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485991" comment="texlive-texdirflatten-2017.134.1.1svn29725-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486845" comment="texlive-texdirflatten-bin-2017.20170520.svn12782-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485993" comment="texlive-texdoc-2017.134.svn44432-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486846" comment="texlive-texdoc-bin-2017.20170520.svn29741-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485995" comment="texlive-texdraw-2017.134.svn31894-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485996" comment="texlive-texfot-2017.134.1.32svn39660-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486847" comment="texlive-texfot-bin-2017.20170520.svn33155-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485998" comment="texlive-texilikechaps-2017.134.1.0asvn28553-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009485999" comment="texlive-texilikecover-2017.134.0.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486000" comment="texlive-texinfo-2017.134.5.1svn43137-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486001" comment="texlive-texlive-common-2017.134.svn44191-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486002" comment="texlive-texlive-cz-2017.134.svn44347-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486003" comment="texlive-texlive-de-2017.134.svn44366-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486004" comment="texlive-texlive-en-2017.134.svn44424-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486005" comment="texlive-texlive-es-2017.134.svn44356-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486006" comment="texlive-texlive-fr-2017.134.svn44342-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486007" comment="texlive-texlive-it-2017.134.svn44357-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486008" comment="texlive-texlive-pl-2017.134.svn44343-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486009" comment="texlive-texlive-ru-2017.134.svn44444-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486010" comment="texlive-texlive-sr-2017.134.svn44341-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486011" comment="texlive-texlive-zh-cn-2017.134.svn44333-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486012" comment="texlive-texlive.infra-2017.134.svn44462-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486013" comment="texlive-texliveonfly-2017.134.svn26313-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486848" comment="texlive-texliveonfly-bin-2017.20170520.svn24062-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486015" comment="texlive-texloganalyser-2017.134.0.0.9svn35584-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486849" comment="texlive-texloganalyser-bin-2017.20170520.svn13663-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486017" comment="texlive-texlogos-2017.134.1.3.1svn19083-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486850" comment="texlive-texlua-devel-5.2.4-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486851" comment="texlive-texluajit-devel-2.1.0beta2-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486020" comment="texlive-texmate-2017.134.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486021" comment="texlive-texments-2017.134.0.0.2.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486022" comment="texlive-texosquery-2017.134.1.5svn44509-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486852" comment="texlive-texosquery-bin-2017.20170520.svn43596-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486024" comment="texlive-texpower-2017.134.0.0.2svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486025" comment="texlive-texproposal-2017.134.1.4svn43151-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486026" comment="texlive-texshade-2017.134.1.24svn24716-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486027" comment="texlive-texsis-2017.134.2.18svn39057-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486853" comment="texlive-texsis-bin-2017.20170520.svn3006-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486029" comment="texlive-textcase-2017.134.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486030" comment="texlive-textfit-2017.134.5svn20591-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486031" comment="texlive-textglos-2017.134.1.0svn30788-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486032" comment="texlive-textgreek-2017.134.0.0.7svn44192-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486033" comment="texlive-textmerg-2017.134.2.01svn20677-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486034" comment="texlive-textopo-2017.134.1.5svn23796-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486035" comment="texlive-textpath-2017.134.1.6svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486036" comment="texlive-textpos-2017.134.1.8svn41331-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486037" comment="texlive-texvc-2017.134.1.0svn38809-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486038" comment="texlive-texware-2017.134.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486854" comment="texlive-texware-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486040" comment="texlive-tfrupee-2017.134.1.02svn20770-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486041" comment="texlive-tfrupee-fonts-2017.134.1.02svn20770-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486042" comment="texlive-thaienum-2017.134.0.0.2svn44140-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486043" comment="texlive-thalie-2017.134.0.0.9bsvn44048-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486044" comment="texlive-theoremref-2017.134.svn30640-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486045" comment="texlive-thesis-ekf-2017.134.2.1svn43745-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486046" comment="texlive-thesis-titlepage-fhac-2017.134.0.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486047" comment="texlive-thinsp-2017.134.0.0.2svn39669-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486048" comment="texlive-thmbox-2017.134.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486049" comment="texlive-thmtools-2017.134.66svn33624-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486050" comment="texlive-threadcol-2017.134.1.0svn28754-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486051" comment="texlive-threeddice-2017.134.1.0svn20675-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486052" comment="texlive-threeparttable-2017.134.svn17383-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486053" comment="texlive-threeparttablex-2017.134.0.0.3svn34206-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486054" comment="texlive-thumb-2017.134.1.0svn16549-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486055" comment="texlive-thumbpdf-2017.134.3.16svn34621-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486855" comment="texlive-thumbpdf-bin-2017.20170520.svn6898-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486057" comment="texlive-thumbs-2017.134.1.0qsvn33134-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486058" comment="texlive-thumby-2017.134.0.0.1svn16736-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486059" comment="texlive-thuthesis-2017.134.5.3.2svn43609-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486060" comment="texlive-ticket-2017.134.0.0.4dsvn42280-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486061" comment="texlive-ticollege-2017.134.1.0svn36306-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486062" comment="texlive-tie-2017.134.2.4svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486856" comment="texlive-tie-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486064" comment="texlive-tikz-3dplot-2017.133.svn25087-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486065" comment="texlive-tikz-bayesnet-2017.133.0.0.1svn38295-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486066" comment="texlive-tikz-cd-2017.133.0.0.9esvn35485-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486067" comment="texlive-tikz-dependency-2017.133.1.2svn42454-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486068" comment="texlive-tikz-dimline-2017.133.1.0svn35805-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486069" comment="texlive-tikz-feynman-2017.133.1.1.0svn39582-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486070" comment="texlive-tikz-inet-2017.133.0.0.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486071" comment="texlive-tikz-kalender-2017.133.0.0.4asvn44393-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486072" comment="texlive-tikz-opm-2017.133.0.0.1.1svn32769-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486073" comment="texlive-tikz-optics-2017.133.0.0.2.3svn43466-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486074" comment="texlive-tikz-page-2017.133.1.0svn42039-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486075" comment="texlive-tikz-palattice-2017.133.2.3svn43442-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486076" comment="texlive-tikz-qtree-2017.133.1.2svn26108-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486077" comment="texlive-tikz-timing-2017.133.0.0.7dsvn21013-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486078" comment="texlive-tikzinclude-2017.133.1.0svn28715-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486079" comment="texlive-tikzmark-2017.133.1.3svn44475-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486080" comment="texlive-tikzorbital-2017.133.svn36439-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486081" comment="texlive-tikzpagenodes-2017.133.1.1svn27723-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486082" comment="texlive-tikzpeople-2017.133.0.0.4svn43978-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486083" comment="texlive-tikzpfeile-2017.133.1.0svn25777-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486084" comment="texlive-tikzposter-2017.133.2.0svn32732-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486085" comment="texlive-tikzscale-2017.133.0.0.2.6svn30637-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486086" comment="texlive-tikzsymbols-2017.133.4.02svn44350-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486087" comment="texlive-times-2017.133.svn35058-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486088" comment="texlive-times-fonts-2017.133.svn35058-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486089" comment="texlive-timetable-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486090" comment="texlive-timing-diagrams-2017.133.svn31491-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486091" comment="texlive-tinos-2017.133.svn42882-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486092" comment="texlive-tinos-fonts-2017.133.svn42882-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486093" comment="texlive-tipa-2017.133.1.3svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486094" comment="texlive-tipa-de-2017.133.1.3svn22005-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486095" comment="texlive-tipa-fonts-2017.133.1.3svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486096" comment="texlive-tipfr-2017.133.1.5svn38646-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486097" comment="texlive-titlecaps-2017.133.1.2svn36170-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486098" comment="texlive-titlefoot-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486099" comment="texlive-titlepages-2017.133.svn19457-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486100" comment="texlive-titlepic-2017.133.1.2svn43497-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486101" comment="texlive-titleref-2017.133.3.1svn18729-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486102" comment="texlive-titlesec-2017.133.2.10.2svn40129-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486103" comment="texlive-titling-2017.133.2.1dsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486104" comment="texlive-tkz-base-2017.133.1.16svn22961-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486105" comment="texlive-tkz-berge-2017.133.1.00csvn22891-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486106" comment="texlive-tkz-doc-2017.133.1.1csvn22959-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486107" comment="texlive-tkz-euclide-2017.133.1.16csvn22830-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486108" comment="texlive-tkz-fct-2017.133.1.16csvn22831-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486109" comment="texlive-tkz-graph-2017.133.1.00svn22832-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486110" comment="texlive-tkz-kiviat-2017.133.0.0.1svn22857-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486111" comment="texlive-tkz-linknodes-2017.133.1.0csvn22833-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486112" comment="texlive-tkz-orm-2017.133.0.0.1.4svn39408-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486113" comment="texlive-tkz-tab-2017.133.1.3csvn22834-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486114" comment="texlive-tlc2-2017.133.svn26096-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486115" comment="texlive-tocbibind-2017.133.1.5ksvn20085-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486116" comment="texlive-tocdata-2017.133.0.0.12svn42623-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486117" comment="texlive-tocloft-2017.133.2.3fsvn30209-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486118" comment="texlive-tocvsec2-2017.133.1.3asvn33146-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486119" comment="texlive-todo-2017.133.2.142svn17746-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486120" comment="texlive-todonotes-2017.133.1.0.5svn42423-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486121" comment="texlive-tokenizer-2017.133.1.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486122" comment="texlive-toolbox-2017.133.5.1svn32260-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486123" comment="texlive-tools-2017.133.svn43813-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486124" comment="texlive-topfloat-2017.133.svn19084-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486125" comment="texlive-toptesi-2017.133.5.9.06svn42586-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486126" comment="texlive-totcount-2017.133.1.2svn21178-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486127" comment="texlive-totpages-2017.133.2.00svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486128" comment="texlive-tpic2pdftex-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486857" comment="texlive-tpic2pdftex-bin-2017.20170520.svn29741-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486130" comment="texlive-tpslifonts-2017.133.0.0.6svn42428-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486131" comment="texlive-tqft-2017.133.2.1svn44455-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486132" comment="texlive-tracklang-2017.133.1.3.4svn43605-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486133" comment="texlive-trajan-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486134" comment="texlive-trajan-fonts-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486135" comment="texlive-tram-2017.133.0.0.2svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486136" comment="texlive-translation-array-fr-2017.133.svn24344-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486137" comment="texlive-translation-arsclassica-de-2017.133.svn23803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486138" comment="texlive-translation-biblatex-de-2017.133.2.0svn42198-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486139" comment="texlive-translation-chemsym-de-2017.133.svn23804-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486140" comment="texlive-translation-dcolumn-fr-2017.133.svn24345-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486141" comment="texlive-translation-ecv-de-2017.133.svn24754-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486142" comment="texlive-translation-enumitem-de-2017.133.svn24196-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486143" comment="texlive-translation-europecv-de-2017.133.svn23840-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486144" comment="texlive-translation-filecontents-de-2017.133.svn24010-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486145" comment="texlive-translation-moreverb-de-2017.133.svn23957-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486146" comment="texlive-translation-natbib-fr-2017.133.svn25105-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486147" comment="texlive-translation-tabbing-fr-2017.133.svn24228-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486148" comment="texlive-translations-2017.133.1.6svn44381-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486149" comment="texlive-tree-dvips-2017.133.0.0.91svn21751-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486150" comment="texlive-treetex-2017.133.svn28176-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486151" comment="texlive-trfsigns-2017.133.1.01svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486152" comment="texlive-trigonometry-2017.133.svn43006-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486153" comment="texlive-trimspaces-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486154" comment="texlive-trivfloat-2017.133.1.3bsvn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486155" comment="texlive-trsym-2017.133.1.0svn18732-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486156" comment="texlive-truncate-2017.133.3.6svn18921-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486157" comment="texlive-tsemlines-2017.133.1.0svn23440-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486158" comment="texlive-ttfutils-2017.133.svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486858" comment="texlive-ttfutils-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486160" comment="texlive-tucv-2017.133.1.0svn20680-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486161" comment="texlive-tudscr-2017.133.2.05msvn44480-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486162" comment="texlive-tufte-latex-2017.133.3.5.2svn37649-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486163" comment="texlive-tugboat-2017.133.2.18svn42465-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486164" comment="texlive-tugboat-plain-2017.133.1.23svn43560-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486165" comment="texlive-tui-2017.133.1.9svn27253-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486166" comment="texlive-turabian-2017.133.0.0.1.0svn36298-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486167" comment="texlive-turabian-formatting-2017.133.svn43537-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486168" comment="texlive-turkmen-2017.133.0.0.2svn17748-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486169" comment="texlive-turnstile-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486170" comment="texlive-turnthepage-2017.133.1.3asvn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486171" comment="texlive-twoinone-2017.133.svn17024-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486172" comment="texlive-twoup-2017.133.1.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486173" comment="texlive-txfonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486174" comment="texlive-txfonts-fonts-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486175" comment="texlive-txfontsb-2017.133.1.1svn21578-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486176" comment="texlive-txfontsb-fonts-2017.133.1.1svn21578-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486177" comment="texlive-txgreeks-2017.133.1.0svn21839-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486178" comment="texlive-txuprcal-2017.133.1.00svn43327-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486179" comment="texlive-txuprcal-fonts-2017.133.1.00svn43327-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486180" comment="texlive-type1cm-2017.133.svn21820-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486181" comment="texlive-typed-checklist-2017.133.1.4svn40389-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486182" comment="texlive-typeface-2017.133.0.0.1svn27046-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486183" comment="texlive-typehtml-2017.133.svn17134-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486184" comment="texlive-typeoutfileinfo-2017.133.0.0.31svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486859" comment="texlive-typeoutfileinfo-bin-2017.20170520.svn25648-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486186" comment="texlive-typicons-2017.133.2.0.7svn37623-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486187" comment="texlive-typicons-fonts-2017.133.2.0.7svn37623-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486188" comment="texlive-typoaid-2017.133.0.0.4.7svn44238-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486189" comment="texlive-typogrid-2017.133.0.0.21svn24994-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486190" comment="texlive-uaclasses-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486191" comment="texlive-uafthesis-2017.133.12.12svn29349-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486192" comment="texlive-uantwerpendocs-2017.133.1.8svn42912-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486193" comment="texlive-uassign-2017.133.1.01svn38459-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486194" comment="texlive-ucbthesis-2017.133.3.5svn37776-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486195" comment="texlive-ucdavisthesis-2017.133.1.3svn40772-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486196" comment="texlive-ucharcat-2017.133.0.0.03svn38907-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486197" comment="texlive-ucharclasses-2017.133.2.2.1svn40854-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486198" comment="texlive-ucs-2017.133.2.2svn35853-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487027" comment="texlive-ucthesis-2017.136.3.2svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487028" comment="texlive-udesoftec-2017.136.1.6.0svn44308-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487029" comment="texlive-uebungsblatt-2017.136.1.5.0svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487030" comment="texlive-uestcthesis-2017.136.1.1.0svn36371-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487031" comment="texlive-uhc-2017.136.svn16791-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487032" comment="texlive-uhc-fonts-2017.136.svn16791-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487033" comment="texlive-uhhassignment-2017.136.1.0svn44026-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487034" comment="texlive-uhrzeit-2017.136.0.0.2csvn39570-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487035" comment="texlive-uiucredborder-2017.136.1.00svn29974-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487036" comment="texlive-uiucthesis-2017.136.2.25svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487037" comment="texlive-ukrhyph-2017.136.svn21081-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487038" comment="texlive-ulem-2017.136.svn26785-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487039" comment="texlive-ulqda-2017.136.1.1svn26313-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486860" comment="texlive-ulqda-bin-2017.20170520.svn13663-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487040" comment="texlive-ulthese-2017.136.4.4svn44456-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487041" comment="texlive-umbclegislation-2017.136.2016_6_8svn41348-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487042" comment="texlive-umich-thesis-2017.136.1.20svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487043" comment="texlive-uml-2017.136.0.0.11svn17476-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487044" comment="texlive-umlaute-2017.136.2.1svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487045" comment="texlive-umoline-2017.136.svn19085-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487046" comment="texlive-umthesis-2017.136.0.0.2svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487047" comment="texlive-umtypewriter-2017.136.001.002svn18651-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487048" comment="texlive-umtypewriter-fonts-2017.136.001.002svn18651-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487049" comment="texlive-unamth-template-2017.136.2.0svn33625-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487050" comment="texlive-unamthesis-2017.136.2.1svn43639-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487051" comment="texlive-undergradmath-2017.136.svn42926-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487052" comment="texlive-underlin-2017.136.1.01svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487053" comment="texlive-underoverlap-2017.136.0.0.0.1_r1svn29019-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487054" comment="texlive-underscore-2017.136.svn18261-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487055" comment="texlive-undolabl-2017.136.1.0lsvn36681-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487056" comment="texlive-unfonts-core-2017.136.svn44467-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487057" comment="texlive-unfonts-core-fonts-2017.136.svn44467-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487058" comment="texlive-unfonts-extra-2017.136.svn44465-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487059" comment="texlive-unfonts-extra-fonts-2017.136.svn44465-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487060" comment="texlive-uni-wtal-ger-2017.136.0.0.2svn31541-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487061" comment="texlive-uni-wtal-lin-2017.136.0.0.2svn31409-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487062" comment="texlive-unicode-bidi-2017.136.0.0.01svn42482-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487063" comment="texlive-unicode-data-2017.136.1.5svn41521-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487064" comment="texlive-unicode-math-2017.136.0.0.8dsvn43068-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487065" comment="texlive-unisugar-2017.136.0.0.92svn22357-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487066" comment="texlive-units-2017.136.0.0.9bsvn42428-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487067" comment="texlive-unitsdef-2017.136.0.0.2svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487068" comment="texlive-universa-2017.136.2.0svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487069" comment="texlive-universalis-2017.136.svn33860-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487070" comment="texlive-universalis-fonts-2017.136.svn33860-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487071" comment="texlive-unravel-2017.136.0.0.2svn38506-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487072" comment="texlive-unswcover-2017.136.1.0svn29476-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487073" comment="texlive-uothesis-2017.136.2.5.6svn25355-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487074" comment="texlive-uowthesis-2017.136.1.0asvn19700-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487075" comment="texlive-uowthesistitlepage-2017.136.2.0svn32626-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487076" comment="texlive-upca-2017.136.svn22511-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487077" comment="texlive-updmap-map-2017.136.svn43366-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487078" comment="texlive-uplatex-2017.136.svn44210-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486861" comment="texlive-uplatex-bin-2017.20170520.svn26326-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487079" comment="texlive-upmethodology-2017.136.svn43453-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487080" comment="texlive-uppunctlm-2017.136.0.0.1svn42334-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487081" comment="texlive-upquote-2017.136.1.3svn26059-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487082" comment="texlive-uptex-2017.136.1.20svn42950-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487083" comment="texlive-uptex-base-2017.136.svn43900-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486862" comment="texlive-uptex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487084" comment="texlive-uptex-fonts-2017.136.svn42853-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487085" comment="texlive-urcls-2017.136.2.0svn43734-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487086" comment="texlive-uri-2017.136.1.0asvn21608-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487087" comment="texlive-url-2017.136.3.4svn32528-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487088" comment="texlive-urlbst-2017.136.0.0.7svn29803-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486863" comment="texlive-urlbst-bin-2017.20170520.svn23262-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487089" comment="texlive-urwchancal-2017.136.1svn21701-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487090" comment="texlive-usebib-2017.136.1.0asvn25969-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487091" comment="texlive-ushort-2017.136.2.2svn32261-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487092" comment="texlive-uspace-2017.136.0.0.04svn42456-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487093" comment="texlive-uspatent-2017.136.1.0svn27744-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487094" comment="texlive-ut-thesis-2017.136.2.1svn38269-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487095" comment="texlive-utf8mex-2017.136.svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487096" comment="texlive-utopia-2017.136.svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487097" comment="texlive-utopia-fonts-2017.136.svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487098" comment="texlive-uwmslide-2017.136.svn27354-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487099" comment="texlive-uwthesis-2017.136.6.13svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487100" comment="texlive-vak-2017.136.svn23431-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487101" comment="texlive-vancouver-2017.136.svn34470-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487102" comment="texlive-variablelm-2017.136.1.1.1svn43686-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487103" comment="texlive-variations-2017.136.0.0.3svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487104" comment="texlive-varindex-2017.136.2.3svn32262-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487105" comment="texlive-varisize-2017.136.svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487106" comment="texlive-varsfromjobname-2017.136.1.0svn44154-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487107" comment="texlive-varwidth-2017.136.0.0.92svn24104-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487108" comment="texlive-vaucanson-g-2017.136.0.0.4svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487109" comment="texlive-vdmlisting-2017.136.1.0svn29944-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487110" comment="texlive-velthuis-2017.136.2.17svn44166-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486864" comment="texlive-velthuis-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487111" comment="texlive-velthuis-fonts-2017.136.2.17svn44166-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487112" comment="texlive-venn-2017.136.svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487113" comment="texlive-venndiagram-2017.136.1.1svn40058-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487114" comment="texlive-venturisadf-2017.136.1.005svn19444-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487115" comment="texlive-venturisadf-fonts-2017.136.1.005svn19444-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487116" comment="texlive-verbasef-2017.136.1.1svn21922-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487117" comment="texlive-verbatimbox-2017.136.3.13svn33197-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487118" comment="texlive-verbatimcopy-2017.136.0.0.06svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487119" comment="texlive-verbdef-2017.136.0.0.2svn17177-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487120" comment="texlive-verbments-2017.136.1.2svn23670-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487121" comment="texlive-verse-2017.136.2.4bsvn34017-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487122" comment="texlive-version-2017.136.2.0svn21920-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487123" comment="texlive-versions-2017.136.0.0.55svn21921-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487124" comment="texlive-versonotes-2017.136.0.0.3svn39084-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487125" comment="texlive-vertbars-2017.136.1.0bsvn20589-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487126" comment="texlive-vgrid-2017.136.0.0.1svn32457-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487127" comment="texlive-vhistory-2017.136.1.6.1svn30080-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487128" comment="texlive-visualfaq-2017.136.svn38647-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487129" comment="texlive-visualpstricks-2017.136.2.3svn39799-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487130" comment="texlive-visualtikz-2017.136.0.0.64svn43239-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487131" comment="texlive-vlna-2017.136.svn44166-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486865" comment="texlive-vlna-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487132" comment="texlive-vmargin-2017.136.2.5svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487133" comment="texlive-vntex-2017.136.3.2svn30579-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487134" comment="texlive-vntex-fonts-2017.136.3.2svn30579-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487135" comment="texlive-vocaltract-2017.136.1svn25629-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487136" comment="texlive-volumes-2017.136.1.0svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487137" comment="texlive-voss-mathcol-2017.136.0.0.1svn32954-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487138" comment="texlive-vpe-2017.136.0.0.2svn26039-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486866" comment="texlive-vpe-bin-2017.20170520.svn6897-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487139" comment="texlive-vruler-2017.136.2.3svn21598-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487140" comment="texlive-vwcol-2017.136.0.0.2svn36254-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487141" comment="texlive-wadalab-2017.136.svn42428-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487142" comment="texlive-wadalab-fonts-2017.136.svn42428-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487143" comment="texlive-wallpaper-2017.136.1.10svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487144" comment="texlive-warning-2017.136.0.0.01svn22028-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487145" comment="texlive-warpcol-2017.136.1.0csvn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487146" comment="texlive-was-2017.136.svn21439-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487147" comment="texlive-wasy-2017.136.svn35831-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487148" comment="texlive-wasy2-ps-2017.136.svn35830-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487149" comment="texlive-wasy2-ps-fonts-2017.136.svn35830-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487150" comment="texlive-wasysym-2017.136.2.0svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487151" comment="texlive-web-2017.136.4.5svn44166-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486867" comment="texlive-web-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487152" comment="texlive-webguide-2017.136.svn25813-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487153" comment="texlive-widetable-2017.136.1.1svn16082-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487154" comment="texlive-williams-2017.136.svn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487155" comment="texlive-withargs-2017.136.0.0.2.0svn42756-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487156" comment="texlive-wnri-2017.136.svn22459-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487157" comment="texlive-wnri-latex-2017.136.1.0bsvn22338-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487158" comment="texlive-wordcount-2017.136.1.7svn41381-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487159" comment="texlive-wordlike-2017.136.1.2bsvn15878-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487160" comment="texlive-wrapfig-2017.136.3.6svn22048-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487161" comment="texlive-wsemclassic-2017.136.1.0.1svn31532-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486342" comment="texlive-wsuipa-2017.133.svn25469-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486343" comment="texlive-wtref-2017.133.0.0.3.2svn42981-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486344" comment="texlive-xargs-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486345" comment="texlive-xassoccnt-2017.133.1.4svn44127-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486346" comment="texlive-xcharter-2017.133.1.08svn43465-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486347" comment="texlive-xcharter-fonts-2017.133.1.08svn43465-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486348" comment="texlive-xcite-2017.133.1.0svn23783-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486349" comment="texlive-xcjk2uni-2017.133.0.0.6svn41121-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486350" comment="texlive-xcntperchap-2017.133.0.0.4svn44128-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486351" comment="texlive-xcolor-2017.133.2.12svn41044-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486352" comment="texlive-xcolor-material-2017.133.0.0.1svn42289-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486353" comment="texlive-xcolor-solarized-2017.133.0.0.4svn41809-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486354" comment="texlive-xcomment-2017.133.1.3svn20031-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486355" comment="texlive-xcookybooky-2017.133.1.5svn36435-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486356" comment="texlive-xdoc-2017.133.prot2.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486357" comment="texlive-xduthesis-2017.133.1.00svn39694-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486358" comment="texlive-xdvi-2017.133.22.87.03svn44166-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486868" comment="texlive-xdvi-bin-2017.20170520.svn44143-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486360" comment="texlive-xebaposter-2017.133.2.51svn42046-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486361" comment="texlive-xecjk-2017.133.3.4.8svn44370-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486362" comment="texlive-xecolor-2017.133.0.0.1svn29660-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486363" comment="texlive-xecyr-2017.133.1.1svn20221-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486364" comment="texlive-xeindex-2017.133.0.0.3svn35756-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486365" comment="texlive-xellipsis-2017.133.1.2svn42764-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486366" comment="texlive-xepersian-2017.133.18.7svn44547-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486367" comment="texlive-xesearch-2017.133.svn16041-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486368" comment="texlive-xespotcolor-2017.133.2.0asvn40118-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486369" comment="texlive-xetex-2017.133.svn41438-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486869" comment="texlive-xetex-bin-2017.20170520.svn44361-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486371" comment="texlive-xetex-devanagari-2017.133.0.0.5svn34296-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486372" comment="texlive-xetex-itrans-2017.133.4.2svn35088-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486373" comment="texlive-xetex-pstricks-2017.133.svn17055-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486374" comment="texlive-xetex-tibetan-2017.133.0.0.1svn28847-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486375" comment="texlive-xetexconfig-2017.133.svn41133-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486376" comment="texlive-xetexfontinfo-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486377" comment="texlive-xetexko-2017.133.2.16svn43173-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486378" comment="texlive-xetexref-2017.133.svn30636-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486379" comment="texlive-xevlna-2017.133.1.1svn43864-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486380" comment="texlive-xfor-2017.133.1.05svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486381" comment="texlive-xgreek-2017.133.3.0svn43222-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486382" comment="texlive-xhfill-2017.133.1.01svn22575-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486383" comment="texlive-xifthen-2017.133.1.4.0svn38929-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486384" comment="texlive-xii-2017.133.svn31683-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486385" comment="texlive-xint-2017.133.1.2ksvn42892-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486386" comment="texlive-xits-2017.133.1.108svn32763-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486387" comment="texlive-xits-fonts-2017.133.1.108svn32763-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486388" comment="texlive-xkeyval-2017.133.2.7asvn35741-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486389" comment="texlive-xlop-2017.133.0.0.26svn42899-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486390" comment="texlive-xltxtra-2017.133.0.0.6svn39453-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486391" comment="texlive-xmltex-2017.133.0.0.8svn40855-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486870" comment="texlive-xmltex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486393" comment="texlive-xmltexconfig-2017.133.svn35743-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486394" comment="texlive-xmpincl-2017.133.2.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486395" comment="texlive-xnewcommand-2017.133.1.2svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486396" comment="texlive-xoptarg-2017.133.1.0svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486397" comment="texlive-xpatch-2017.133.0.0.2svn27897-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486398" comment="texlive-xpeek-2017.133.0.0.2svn27442-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486399" comment="texlive-xpiano-2017.133.1.0svn37604-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486400" comment="texlive-xpicture-2017.133.1.2asvn28770-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486401" comment="texlive-xpinyin-2017.133.2.4svn41940-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486402" comment="texlive-xprintlen-2017.133.1.0svn35928-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486403" comment="texlive-xpunctuate-2017.133.1.0svn26641-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486404" comment="texlive-xq-2017.133.0.0.4svn35211-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486405" comment="texlive-xsavebox-2017.133.0.0.6svn43589-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486406" comment="texlive-xsim-2017.133.0.0.8asvn44430-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486407" comment="texlive-xskak-2017.133.1.4svn35945-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486408" comment="texlive-xstring-2017.133.1.7csvn31900-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486409" comment="texlive-xtab-2017.133.2.3fsvn23347-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486410" comment="texlive-xunicode-2017.133.0.0.981svn30466-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486411" comment="texlive-xwatermark-2017.133.1.5.2dsvn28090-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486412" comment="texlive-xyling-2017.133.1.1svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486413" comment="texlive-xymtex-2017.133.5.06svn32182-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486414" comment="texlive-xypic-2017.133.3.8.9svn31859-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486415" comment="texlive-xypic-fonts-2017.133.3.8.9svn31859-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486416" comment="texlive-xypic-tut-pt-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486417" comment="texlive-xytree-2017.133.1.5svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486418" comment="texlive-yafoot-2017.133.svn19086-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486419" comment="texlive-yagusylo-2017.133.1.2svn29803-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486420" comment="texlive-yaletter-2017.133.1.1svn42830-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486421" comment="texlive-yannisgr-2017.133.svn22613-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486422" comment="texlive-yathesis-2017.133.0.0.99psvn42671-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486423" comment="texlive-yax-2017.133.1.03svn21183-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486424" comment="texlive-ycbook-2017.133.svn43171-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486425" comment="texlive-ydoc-2017.133.0.0.6alphasvn26202-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486426" comment="texlive-yfonts-2017.133.1.3svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486427" comment="texlive-yfonts-t1-2017.133.1.0svn36013-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486428" comment="texlive-yfonts-t1-fonts-2017.133.1.0svn36013-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486429" comment="texlive-yhmath-2017.133.1.1svn31155-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486430" comment="texlive-yhmath-fonts-2017.133.1.1svn31155-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486431" comment="texlive-yinit-otf-2017.133.1.0svn40207-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486432" comment="texlive-yinit-otf-fonts-2017.133.1.0svn40207-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486433" comment="texlive-york-thesis-2017.133.3.6svn23348-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486434" comment="texlive-youngtab-2017.133.1.1svn17635-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486435" comment="texlive-yplan-2017.133.svn34398-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486871" comment="texlive-yplan-bin-2017.20170520.svn34398-11.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486437" comment="texlive-ytableau-2017.133.1.3svn27430-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486438" comment="texlive-zapfchan-2017.133.svn31835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486439" comment="texlive-zapfchan-fonts-2017.133.svn31835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486440" comment="texlive-zapfding-2017.133.svn31835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486441" comment="texlive-zapfding-fonts-2017.133.svn31835-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486442" comment="texlive-zed-csp-2017.133.svn17258-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486443" comment="texlive-zhmetrics-2017.133.r206svn22207-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486444" comment="texlive-zhmetrics-uptex-2017.133.1.0svn40728-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486445" comment="texlive-zhnumber-2017.133.2.4svn41123-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486446" comment="texlive-zhspacing-2017.133.svn41145-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486447" comment="texlive-ziffer-2017.133.2.1svn32279-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486448" comment="texlive-zlmtt-2017.133.1.01svn34485-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486449" comment="texlive-zwgetfdate-2017.133.svn15878-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486450" comment="texlive-zwpagelayout-2017.133.1.4dsvn28846-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486451" comment="texlive-zxjafbfont-2017.133.0.0.2svn28539-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486452" comment="texlive-zxjafont-2017.133.0.0.3svn37281-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486453" comment="texlive-zxjatype-2017.133.0.0.6svn28541-5.18 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10248</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10248" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10248" ref_url="https://www.suse.com/security/cve/CVE-2016-10248" source="SUSE CVE"/>
    <description>
    The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) via vectors involving an empty sequence.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10248/">CVE-2016-10248</cve>
	<bugzilla href="https://bugzilla.suse.com/1029705">SUSE bug 1029705</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335448" comment="libjasper-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659674" comment="libjasper4 is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10249</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10249" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10249" ref_url="https://www.suse.com/security/cve/CVE-2016-10249" source="SUSE CVE"/>
    <description>
    Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10249/">CVE-2016-10249</cve>
	<bugzilla href="https://bugzilla.suse.com/1029704">SUSE bug 1029704</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335448" comment="libjasper-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659674" comment="libjasper4 is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10251</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10251" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10251" ref_url="https://www.suse.com/security/cve/CVE-2016-10251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002789.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00061.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10251/">CVE-2016-10251</cve>
	<bugzilla href="https://bugzilla.suse.com/1029497">SUSE bug 1029497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10266</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10266" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10266" ref_url="https://www.suse.com/security/cve/CVE-2016-10266" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10266/">CVE-2016-10266</cve>
	<bugzilla href="https://bugzilla.suse.com/1017694">SUSE bug 1017694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031263">SUSE bug 1031263</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10267</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10267" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10267" ref_url="https://www.suse.com/security/cve/CVE-2016-10267" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10267/">CVE-2016-10267</cve>
	<bugzilla href="https://bugzilla.suse.com/1017694">SUSE bug 1017694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031262">SUSE bug 1031262</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10268</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10268" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10268" ref_url="https://www.suse.com/security/cve/CVE-2016-10268" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10268/">CVE-2016-10268</cve>
	<bugzilla href="https://bugzilla.suse.com/1017693">SUSE bug 1017693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031255">SUSE bug 1031255</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10269</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10269" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10269" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10269" ref_url="https://www.suse.com/security/cve/CVE-2016-10269" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10269/">CVE-2016-10269</cve>
	<bugzilla href="https://bugzilla.suse.com/1017693">SUSE bug 1017693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031254">SUSE bug 1031254</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10270</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10270" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10270" ref_url="https://www.suse.com/security/cve/CVE-2016-10270" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10270/">CVE-2016-10270</cve>
	<bugzilla href="https://bugzilla.suse.com/1031250">SUSE bug 1031250</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10271</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10271" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10271" ref_url="https://www.suse.com/security/cve/CVE-2016-10271" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10271/">CVE-2016-10271</cve>
	<bugzilla href="https://bugzilla.suse.com/1031249">SUSE bug 1031249</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10272</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10272" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10272" ref_url="https://www.suse.com/security/cve/CVE-2016-10272" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1108-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00032.html" source="SUSE-SU"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10272/">CVE-2016-10272</cve>
	<bugzilla href="https://bugzilla.suse.com/1031247">SUSE bug 1031247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10317</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10317" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10317" ref_url="https://www.suse.com/security/cve/CVE-2016-10317" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003717.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0421-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00039.html" source="SUSE-SU"/>
    <description>
    The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10317/">CVE-2016-10317</cve>
	<bugzilla href="https://bugzilla.suse.com/1032230">SUSE bug 1032230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610327" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10327</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10327" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10327" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10327" ref_url="https://www.suse.com/security/cve/CVE-2016-10327" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003174.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1851-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00065.html" source="SUSE-SU"/>
    <description>
    LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function in vcl/source/filter/wmf/enhwmf.cxx.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10327/">CVE-2016-10327</cve>
	<bugzilla href="https://bugzilla.suse.com/1034192">SUSE bug 1034192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10371</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10371" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10371" ref_url="https://www.suse.com/security/cve/CVE-2016-10371" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003259.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2635-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10371/">CVE-2016-10371</cve>
	<bugzilla href="https://bugzilla.suse.com/1038438">SUSE bug 1038438</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10396</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10396" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10396" ref_url="https://www.suse.com/security/cve/CVE-2016-10396" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003723.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003724.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0434-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00041.html" source="SUSE-SU"/>
    <description>
    The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10396/">CVE-2016-10396</cve>
	<bugzilla href="https://bugzilla.suse.com/1047443">SUSE bug 1047443</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480330" comment="ipsec-tools-0.8.2-5.35 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10504</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10504" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10504" ref_url="https://www.suse.com/security/cve/CVE-2016-10504" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (application crash) via a crafted bmp file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10504/">CVE-2016-10504</cve>
	<bugzilla href="https://bugzilla.suse.com/1056351">SUSE bug 1056351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179594">SUSE bug 1179594</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10505</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10505" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10505" ref_url="https://www.suse.com/security/cve/CVE-2016-10505" source="SUSE CVE"/>
    <description>
    NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb function in color.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10505/">CVE-2016-10505</cve>
	<bugzilla href="https://bugzilla.suse.com/1056363">SUSE bug 1056363</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10506</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10506" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10506" ref_url="https://www.suse.com/security/cve/CVE-2016-10506" source="SUSE CVE"/>
    <description>
    Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10506/">CVE-2016-10506</cve>
	<bugzilla href="https://bugzilla.suse.com/1056396">SUSE bug 1056396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10516</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10516" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10516" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10516" ref_url="https://www.suse.com/security/cve/CVE-2016-10516" source="SUSE CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-10516/">CVE-2016-10516</cve>
	<bugzilla href="https://bugzilla.suse.com/1064783">SUSE bug 1064783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009350793" comment="python3-Werkzeug is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009781774" comment="python2-Werkzeug is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10713</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10713" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10713" ref_url="https://www.suse.com/security/cve/CVE-2016-10713" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00004.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly lead to DoS via a crafted input file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-10713/">CVE-2016-10713</cve>
	<bugzilla href="https://bugzilla.suse.com/1080918">SUSE bug 1080918</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101128">SUSE bug 1101128</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481616" comment="patch-2.7.6-3.5 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10714</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10714" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10714" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10714" ref_url="https://www.suse.com/security/cve/CVE-2016-10714" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1072-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010436.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00073.html" source="SUSE-SU"/>
    <description>
    In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10714/">CVE-2016-10714</cve>
	<bugzilla href="https://bugzilla.suse.com/1083250">SUSE bug 1083250</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200039">SUSE bug 1200039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339511" comment="zsh is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10739</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10739" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10739" ref_url="https://www.suse.com/security/cve/CVE-2016-10739" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0903-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190903-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013417.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00082.html" source="SUSE-SU"/>
    <description>
    In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10739/">CVE-2016-10739</cve>
	<bugzilla href="https://bugzilla.suse.com/1122729">SUSE bug 1122729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155094">SUSE bug 1155094</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334045" comment="glibc is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334045" comment="glibc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335227" comment="glibc-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335238" comment="glibc-devel-static is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338796" comment="glibc-extra is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335228" comment="glibc-i18ndata is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335232" comment="glibc-info is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335229" comment="glibc-locale is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338797" comment="glibc-locale-base is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335233" comment="glibc-profile is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335230" comment="nscd is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334045" comment="glibc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335234" comment="glibc-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335227" comment="glibc-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335235" comment="glibc-devel-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335238" comment="glibc-devel-static is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338796" comment="glibc-extra is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335228" comment="glibc-i18ndata is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335232" comment="glibc-info is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335229" comment="glibc-locale is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335236" comment="glibc-locale-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338797" comment="glibc-locale-base is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335233" comment="glibc-profile is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335230" comment="nscd is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009674713" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790310" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674714" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790311" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674715" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790312" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674716" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674717" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790313" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674718" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790315" comment="glibc-devel-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790316" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790317" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10741</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10741" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10741" ref_url="https://www.suse.com/security/cve/CVE-2016-10741" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13979-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005194.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of service (system crash) because there is a race condition between direct and memory-mapped I/O (associated with a hole) that is handled with BUG_ON instead of an I/O failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-10741/">CVE-2016-10741</cve>
	<bugzilla href="https://bugzilla.suse.com/1114920">SUSE bug 1114920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124010">SUSE bug 1124010</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10745</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10745" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10745" ref_url="https://www.suse.com/security/cve/CVE-2016-10745" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:6-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008294.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3897-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1614-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2016-10745/">CVE-2016-10745</cve>
	<bugzilla href="https://bugzilla.suse.com/1132174">SUSE bug 1132174</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674422" comment="python3-Jinja2-2.10.1-3.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009675177" comment="python2-Jinja2-2.10.1-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10746</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10746" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10746" ref_url="https://www.suse.com/security/cve/CVE-2016-10746" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005815.html" source="SUSE-SU"/>
    <description>
    libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required, a different vulnerability than CVE-2019-3886.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-10746/">CVE-2016-10746</cve>
	<bugzilla href="https://bugzilla.suse.com/1133150">SUSE bug 1133150</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333954" comment="libvirt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336190" comment="libvirt-admin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009615940" comment="libvirt-bash-completion is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334932" comment="libvirt-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334933" comment="libvirt-daemon is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334934" comment="libvirt-daemon-config-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334935" comment="libvirt-daemon-config-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334936" comment="libvirt-daemon-driver-interface is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334937" comment="libvirt-daemon-driver-libxl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334938" comment="libvirt-daemon-driver-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334939" comment="libvirt-daemon-driver-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334940" comment="libvirt-daemon-driver-nodedev is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334941" comment="libvirt-daemon-driver-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334942" comment="libvirt-daemon-driver-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334943" comment="libvirt-daemon-driver-secret is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334944" comment="libvirt-daemon-driver-storage is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336191" comment="libvirt-daemon-driver-storage-core is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336192" comment="libvirt-daemon-driver-storage-disk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336193" comment="libvirt-daemon-driver-storage-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336194" comment="libvirt-daemon-driver-storage-logical is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336195" comment="libvirt-daemon-driver-storage-mpath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336196" comment="libvirt-daemon-driver-storage-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336197" comment="libvirt-daemon-driver-storage-scsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335515" comment="libvirt-daemon-hooks is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334945" comment="libvirt-daemon-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334946" comment="libvirt-daemon-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334947" comment="libvirt-daemon-xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334950" comment="libvirt-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334948" comment="libvirt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336198" comment="libvirt-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334949" comment="libvirt-lock-sanlock is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335514" comment="libvirt-nss is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10905</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10905" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10905" ref_url="https://www.suse.com/security/cve/CVE-2016-10905" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010401.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010390.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gfs2_clear_rgrpd and read_rindex_entry.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10905/">CVE-2016-10905</cve>
	<bugzilla href="https://bugzilla.suse.com/1146312">SUSE bug 1146312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610906" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10906</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10906" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10906" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10906" ref_url="https://www.suse.com/security/cve/CVE-2016-10906" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the functions arc_emac_tx and arc_emac_tx_clean.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10906/">CVE-2016-10906</cve>
	<bugzilla href="https://bugzilla.suse.com/1146584">SUSE bug 1146584</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10907</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-10907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10907" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-10907" ref_url="https://www.suse.com/security/cve/CVE-2016-10907" source="SUSE CVE"/>
    <description>
    An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write in the function ad5755_parse_dt.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10907/">CVE-2016-10907</cve>
	<bugzilla href="https://bugzilla.suse.com/1146302">SUSE bug 1146302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1234</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1234" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1234" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1234" ref_url="https://www.suse.com/security/cve/CVE-2016-1234" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002230.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1779-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1234/">CVE-2016-1234</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969727">SUSE bug 969727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988770">SUSE bug 988770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988782">SUSE bug 988782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989127">SUSE bug 989127</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1237</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1237" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1237" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1237" ref_url="https://www.suse.com/security/cve/CVE-2016-1237" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html" source="SUSE-SU"/>
    <description>
    nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-13"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1237/">CVE-2016-1237</cve>
	<bugzilla href="https://bugzilla.suse.com/986570">SUSE bug 986570</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1238</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1238" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1238" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1238" ref_url="https://www.suse.com/security/cve/CVE-2016-1238" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002262.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005159.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2011-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192011-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2313-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0297-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1238/">CVE-2016-1238</cve>
	<bugzilla href="https://bugzilla.suse.com/1108749">SUSE bug 1108749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123389">SUSE bug 1123389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987887">SUSE bug 987887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988311">SUSE bug 988311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336056" comment="perl-32bit is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486522" comment="perl-MIME-Charset-1.012.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334114" comment="perl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336057" comment="perl-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337401" comment="perl-base-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336058" comment="perl-doc is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487694" comment="perl-Archive-Extract-0.80-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487695" comment="perl-ExtUtils-MakeMaker-7.30-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487779" comment="perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-10.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487696" comment="perl-Module-Load-Conditional-0.68-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782667" comment="amavisd-new-2.11.1-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782668" comment="amavisd-new-docs-2.11.1-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481621" comment="perl-Mail-SpamAssassin-3.4.2-10.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481622" comment="spamassassin-3.4.2-10.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1245</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1245" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1245" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1245" ref_url="https://www.suse.com/security/cve/CVE-2016-1245" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2569-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2294-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2646-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00061.html" source="SUSE-SU"/>
    <description>
    It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1245/">CVE-2016-1245</cve>
	<bugzilla href="https://bugzilla.suse.com/1005258">SUSE bug 1005258</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488182" comment="libfpm_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488183" comment="libospf0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488184" comment="libospfapiclient0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488185" comment="libquagga_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488186" comment="libzebra1-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488187" comment="quagga-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488188" comment="quagga-devel-1.1.1-2.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1246</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1246" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1246" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1246" ref_url="https://www.suse.com/security/cve/CVE-2016-1246" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002559.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002560.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0252-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00127.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1246/">CVE-2016-1246</cve>
	<bugzilla href="https://bugzilla.suse.com/1002626">SUSE bug 1002626</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480872" comment="perl-DBD-mysql-4.046-1.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1247</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1247" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1247" ref_url="https://www.suse.com/security/cve/CVE-2016-1247" source="SUSE CVE"/>
    <description>
    The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1247/">CVE-2016-1247</cve>
	<bugzilla href="https://bugzilla.suse.com/1007000">SUSE bug 1007000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009348227" comment="nginx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009477760" comment="nginx-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1249</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1249" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1249" ref_url="https://www.suse.com/security/cve/CVE-2016-1249" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002559.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002560.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0252-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00127.html" source="SUSE-SU"/>
    <description>
    The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service (out-of-bounds read) via vectors involving an unaligned number of placeholders in WHERE condition and output fields in SELECT expression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1249/">CVE-2016-1249</cve>
	<bugzilla href="https://bugzilla.suse.com/1010457">SUSE bug 1010457</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480872" comment="perl-DBD-mysql-4.046-1.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1251</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1251" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1251" ref_url="https://www.suse.com/security/cve/CVE-2016-1251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002543.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002560.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3090-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0252-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00127.html" source="SUSE-SU"/>
    <description>
    There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1251/">CVE-2016-1251</cve>
	<bugzilla href="https://bugzilla.suse.com/1012546">SUSE bug 1012546</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480872" comment="perl-DBD-mysql-4.046-1.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1283</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1283" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1283" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1283" ref_url="https://www.suse.com/security/cve/CVE-2016-1283" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2805-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00076.html" source="SUSE-SU"/>
    <description>
    The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'&lt;((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-19"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1283/">CVE-2016-1283</cve>
	<bugzilla href="https://bugzilla.suse.com/960837">SUSE bug 960837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334068" comment="pcre is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335823" comment="libpcre1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335826" comment="libpcre1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335824" comment="libpcre16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335825" comment="libpcrecpp0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335827" comment="libpcrecpp0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335828" comment="libpcreposix0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335829" comment="pcre-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335831" comment="pcre-tools is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480659" comment="libpcre16-0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480660" comment="libpcrecpp0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480661" comment="libpcrecpp0-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480662" comment="libpcreposix0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480663" comment="pcre-devel-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480664" comment="pcre-tools-8.41-4.20 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1285</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1285" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1285" ref_url="https://www.suse.com/security/cve/CVE-2016-1285" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0827-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0830-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0859-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1285/">CVE-2016-1285</cve>
	<bugzilla href="https://bugzilla.suse.com/970072">SUSE bug 970072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981200">SUSE bug 981200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1286</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1286" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1286" ref_url="https://www.suse.com/security/cve/CVE-2016-1286" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0827-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0830-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0859-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1286/">CVE-2016-1286</cve>
	<bugzilla href="https://bugzilla.suse.com/970073">SUSE bug 970073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981200">SUSE bug 981200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1521</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1521" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1521" ref_url="https://www.suse.com/security/cve/CVE-2016-1521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0779-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0875-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00088.html" source="SUSE-SU"/>
    <description>
    The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1521/">CVE-2016-1521</cve>
	<bugzilla href="https://bugzilla.suse.com/965803">SUSE bug 965803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965806">SUSE bug 965806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965807">SUSE bug 965807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/965810">SUSE bug 965810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480301" comment="graphite2-devel-1.3.11-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480302" comment="libgraphite2-3-1.3.11-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480303" comment="libgraphite2-3-32bit-1.3.11-2.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1541</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1541" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1541" ref_url="https://www.suse.com/security/cve/CVE-2016-1541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1463-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1663-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00090.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1541/">CVE-2016-1541</cve>
	<bugzilla href="https://bugzilla.suse.com/979005">SUSE bug 979005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1544</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1544" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1544" ref_url="https://www.suse.com/security/cve/CVE-2016-1544" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:84-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:95-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008541.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0675-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00029.html" source="SUSE-SU"/>
    <description>
    nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-1544/">CVE-2016-1544</cve>
	<bugzilla href="https://bugzilla.suse.com/966514">SUSE bug 966514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480629" comment="libnghttp2-14-1.31.1-1.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480630" comment="libnghttp2-14-32bit-1.31.1-1.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480631" comment="libnghttp2-devel-1.31.1-1.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480632" comment="libnghttp2_asio-devel-1.31.1-1.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480633" comment="libnghttp2_asio1-1.31.1-1.15 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1547</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1547" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1547" ref_url="https://www.suse.com/security/cve/CVE-2016-1547" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-1547/">CVE-2016-1547</cve>
	<bugzilla href="https://bugzilla.suse.com/962784">SUSE bug 962784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977446">SUSE bug 977446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977459">SUSE bug 977459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982064">SUSE bug 982064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982065">SUSE bug 982065</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1548</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1548" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1548" ref_url="https://www.suse.com/security/cve/CVE-2016-1548" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-&gt;dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-1548/">CVE-2016-1548</cve>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977446">SUSE bug 977446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977461">SUSE bug 977461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982068">SUSE bug 982068</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1549</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1549" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1549" ref_url="https://www.suse.com/security/cve/CVE-2016-1549" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003839.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1464-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004208.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1765-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004720.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0970-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00045.html" source="SUSE-SU"/>
    <description>
    A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-1549/">CVE-2016-1549</cve>
	<bugzilla href="https://bugzilla.suse.com/1083424">SUSE bug 1083424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977446">SUSE bug 977446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977451">SUSE bug 977451</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161550" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1550</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1550" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1550" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1550" ref_url="https://www.suse.com/security/cve/CVE-2016-1550" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1550/">CVE-2016-1550</cve>
	<bugzilla href="https://bugzilla.suse.com/977446">SUSE bug 977446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977464">SUSE bug 977464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1551</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1551" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1551" ref_url="https://www.suse.com/security/cve/CVE-2016-1551" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, any packet with a source ip address of a reference clock (127.127.1.1 for example) that reaches the receive() function will match that reference clock's peer record and will be treated as a trusted peer. Any system that lacks the typical martian packet filtering which would block these packets is in danger of having its time controlled by an attacker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1551/">CVE-2016-1551</cve>
	<bugzilla href="https://bugzilla.suse.com/977446">SUSE bug 977446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977450">SUSE bug 977450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1567</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1567" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1567" ref_url="https://www.suse.com/security/cve/CVE-2016-1567" source="SUSE CVE"/>
    <description>
    chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1567/">CVE-2016-1567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481059" comment="chrony-3.2-9.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1568</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1568" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1568" ref_url="https://www.suse.com/security/cve/CVE-2016-1568" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1568/">CVE-2016-1568</cve>
	<bugzilla href="https://bugzilla.suse.com/961332">SUSE bug 961332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961333">SUSE bug 961333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1570</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1570" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1570" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1570" ref_url="https://www.suse.com/security/cve/CVE-2016-1570" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1570/">CVE-2016-1570</cve>
	<bugzilla href="https://bugzilla.suse.com/960861">SUSE bug 960861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1571</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1571" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1571" ref_url="https://www.suse.com/security/cve/CVE-2016-1571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1571/">CVE-2016-1571</cve>
	<bugzilla href="https://bugzilla.suse.com/960861">SUSE bug 960861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960862">SUSE bug 960862</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1572</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1572" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1572" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1572" ref_url="https://www.suse.com/security/cve/CVE-2016-1572" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001827.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-January/001837.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0291-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0302-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00004.html" source="SUSE-SU"/>
    <description>
    mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1572/">CVE-2016-1572</cve>
	<bugzilla href="https://bugzilla.suse.com/962052">SUSE bug 962052</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480202" comment="ecryptfs-utils-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480203" comment="ecryptfs-utils-devel-111-2.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480204" comment="libecryptfs1-111-2.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1575</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1575" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1575" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1575" ref_url="https://www.suse.com/security/cve/CVE-2016-1575" source="SUSE CVE"/>
    <description>
    The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1575/">CVE-2016-1575</cve>
	<bugzilla href="https://bugzilla.suse.com/968092">SUSE bug 968092</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1577</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1577" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1577" ref_url="https://www.suse.com/security/cve/CVE-2016-1577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1577/">CVE-2016-1577</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968373">SUSE bug 968373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1583</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1583" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1583" ref_url="https://www.suse.com/security/cve/CVE-2016-1583" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1596-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2000-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2006-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2009-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="TID7017678" ref_url="https://www.suse.com/support/kb/doc/?id=7017678" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html" source="SUSE-SU"/>
    <description>
    The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1583/">CVE-2016-1583</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052256">SUSE bug 1052256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983143">SUSE bug 983143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983144">SUSE bug 983144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1601</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1601" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1601" ref_url="https://www.suse.com/security/cve/CVE-2016-1601" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00007.html" source="SUSE-SU"/>
    <description>
    yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1601/">CVE-2016-1601</cve>
	<bugzilla href="https://bugzilla.suse.com/973639">SUSE bug 973639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974220">SUSE bug 974220</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481681" comment="yast2-users-4.1.12-1.4 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1621</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1621" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1621" ref_url="https://www.suse.com/security/cve/CVE-2016-1621" source="SUSE CVE"/>
    <description>
    libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug 23452792.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1621/">CVE-2016-1621</cve>
	<bugzilla href="https://bugzilla.suse.com/972021">SUSE bug 972021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480779" comment="libvpx4-1.6.1-4.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486513" comment="libvpx-devel-1.6.1-4.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1714</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1714" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1714" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1714" ref_url="https://www.suse.com/security/cve/CVE-2016-1714" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1714/">CVE-2016-1714</cve>
	<bugzilla href="https://bugzilla.suse.com/961691">SUSE bug 961691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961692">SUSE bug 961692</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1762</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1762" ref_url="https://www.suse.com/security/cve/CVE-2016-1762" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1762/">CVE-2016-1762</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981040">SUSE bug 981040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1833</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1833" ref_url="https://www.suse.com/security/cve/CVE-2016-1833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1833/">CVE-2016-1833</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981108">SUSE bug 981108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1834</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1834" ref_url="https://www.suse.com/security/cve/CVE-2016-1834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1834/">CVE-2016-1834</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981041">SUSE bug 981041</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1835</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1835" ref_url="https://www.suse.com/security/cve/CVE-2016-1835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1835/">CVE-2016-1835</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981109">SUSE bug 981109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1836</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1836" ref_url="https://www.suse.com/security/cve/CVE-2016-1836" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1836/">CVE-2016-1836</cve>
	<bugzilla href="https://bugzilla.suse.com/1174862">SUSE bug 1174862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981110">SUSE bug 981110</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1837</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1837" ref_url="https://www.suse.com/security/cve/CVE-2016-1837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1837/">CVE-2016-1837</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981111">SUSE bug 981111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1838</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1838" ref_url="https://www.suse.com/security/cve/CVE-2016-1838" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1838/">CVE-2016-1838</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981112">SUSE bug 981112</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1839</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1839" ref_url="https://www.suse.com/security/cve/CVE-2016-1839" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002931.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00022.html" source="SUSE-SU"/>
    <description>
    The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1839/">CVE-2016-1839</cve>
	<bugzilla href="https://bugzilla.suse.com/1039069">SUSE bug 1039069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039661">SUSE bug 1039661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069433">SUSE bug 1069433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069690">SUSE bug 1069690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963963">SUSE bug 963963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981114">SUSE bug 981114</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1840</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1840" ref_url="https://www.suse.com/security/cve/CVE-2016-1840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1840/">CVE-2016-1840</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981115">SUSE bug 981115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1856</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1856" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1856" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1856" ref_url="https://www.suse.com/security/cve/CVE-2016-1856" source="SUSE CVE"/>
    <description>
    WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1857.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1856/">CVE-2016-1856</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1857</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1857" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1857" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1857" ref_url="https://www.suse.com/security/cve/CVE-2016-1857" source="SUSE CVE"/>
    <description>
    WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1856.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1857/">CVE-2016-1857</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1866</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1866" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1866" ref_url="https://www.suse.com/security/cve/CVE-2016-1866" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:14402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008281.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0694-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00034.html" source="SUSE-SU"/>
    <description>
    Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1866/">CVE-2016-1866</cve>
	<bugzilla href="https://bugzilla.suse.com/965403">SUSE bug 965403</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481641" comment="python3-salt-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481642" comment="salt-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481643" comment="salt-bash-completion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481644" comment="salt-doc-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481645" comment="salt-minion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481646" comment="salt-zsh-completion-2019.2.0-4.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488438" comment="salt-api-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488439" comment="salt-cloud-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488440" comment="salt-fish-completion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488441" comment="salt-master-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488442" comment="salt-proxy-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488443" comment="salt-ssh-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488444" comment="salt-syndic-2019.2.0-4.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1867</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1867" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1867" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1867" ref_url="https://www.suse.com/security/cve/CVE-2016-1867" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0211-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0217-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1867/">CVE-2016-1867</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961886">SUSE bug 961886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1897</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1897" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1897" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1897" ref_url="https://www.suse.com/security/cve/CVE-2016-1897" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html" source="SUSE-SU"/>
    <description>
    FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1897/">CVE-2016-1897</cve>
	<bugzilla href="https://bugzilla.suse.com/961937">SUSE bug 961937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1898</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1898" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1898" ref_url="https://www.suse.com/security/cve/CVE-2016-1898" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html" source="SUSE-SU"/>
    <description>
    FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1898/">CVE-2016-1898</cve>
	<bugzilla href="https://bugzilla.suse.com/961937">SUSE bug 961937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1907</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1907" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1907" ref_url="https://www.suse.com/security/cve/CVE-2016-1907" source="SUSE CVE"/>
    <description>
    The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-1907/">CVE-2016-1907</cve>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962495">SUSE bug 962495</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1922</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1922" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1922" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1922" ref_url="https://www.suse.com/security/cve/CVE-2016-1922" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'current_cpu' remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1922/">CVE-2016-1922</cve>
	<bugzilla href="https://bugzilla.suse.com/962320">SUSE bug 962320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/962321">SUSE bug 962321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161924" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1924</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1924" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1924" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1924" ref_url="https://www.suse.com/security/cve/CVE-2016-1924" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010666.html" source="SUSE-SU"/>
    <description>
    The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1924/">CVE-2016-1924</cve>
	<bugzilla href="https://bugzilla.suse.com/962522">SUSE bug 962522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980504">SUSE bug 980504</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335369" comment="libopenjp2-7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334004" comment="openjpeg2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338711" comment="openjpeg2-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335369" comment="libopenjp2-7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726871" comment="libopenjp2-7-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334004" comment="openjpeg2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338711" comment="openjpeg2-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161930" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1930</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1930" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1930" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1930" ref_url="https://www.suse.com/security/cve/CVE-2016-1930" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0338-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001894.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1930/">CVE-2016-1930</cve>
	<bugzilla href="https://bugzilla.suse.com/963520">SUSE bug 963520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963632">SUSE bug 963632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1931</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1931" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1931" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1931" ref_url="https://www.suse.com/security/cve/CVE-2016-1931" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="10/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1931/">CVE-2016-1931</cve>
	<bugzilla href="https://bugzilla.suse.com/963633">SUSE bug 963633</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1933</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1933" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1933" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1933" ref_url="https://www.suse.com/security/cve/CVE-2016-1933" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1933/">CVE-2016-1933</cve>
	<bugzilla href="https://bugzilla.suse.com/963634">SUSE bug 963634</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1935</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1935" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1935" ref_url="https://www.suse.com/security/cve/CVE-2016-1935" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0338-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001894.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1935/">CVE-2016-1935</cve>
	<bugzilla href="https://bugzilla.suse.com/963520">SUSE bug 963520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963635">SUSE bug 963635</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1937</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1937" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1937" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1937" ref_url="https://www.suse.com/security/cve/CVE-2016-1937" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1937/">CVE-2016-1937</cve>
	<bugzilla href="https://bugzilla.suse.com/963641">SUSE bug 963641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977736">SUSE bug 977736</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1938</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1938" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1938" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1938" ref_url="https://www.suse.com/security/cve/CVE-2016-1938" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0338-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-February/001894.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1938/">CVE-2016-1938</cve>
	<bugzilla href="https://bugzilla.suse.com/963731">SUSE bug 963731</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1939</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1939" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1939" ref_url="https://www.suse.com/security/cve/CVE-2016-1939" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7208.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1939/">CVE-2016-1939</cve>
	<bugzilla href="https://bugzilla.suse.com/963637">SUSE bug 963637</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1942</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1942" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1942" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1942" ref_url="https://www.suse.com/security/cve/CVE-2016-1942" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by leveraging a user's paste of a (1) wyciwyg: URI or (2) resource: URI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-1942/">CVE-2016-1942</cve>
	<bugzilla href="https://bugzilla.suse.com/963643">SUSE bug 963643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161943" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1943</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1943" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1943" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1943" ref_url="https://www.suse.com/security/cve/CVE-2016-1943" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1943/">CVE-2016-1943</cve>
	<bugzilla href="https://bugzilla.suse.com/963643">SUSE bug 963643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1944</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1944" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1944" ref_url="https://www.suse.com/security/cve/CVE-2016-1944" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-13"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1944/">CVE-2016-1944</cve>
	<bugzilla href="https://bugzilla.suse.com/963644">SUSE bug 963644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1945</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1945" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1945" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1945" ref_url="https://www.suse.com/security/cve/CVE-2016-1945" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect use of a pointer during processing of a ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-18"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1945/">CVE-2016-1945</cve>
	<bugzilla href="https://bugzilla.suse.com/963644">SUSE bug 963644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1946</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1946" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1946" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1946" ref_url="https://www.suse.com/security/cve/CVE-2016-1946" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a denial of service (integer overflow and buffer overflow) or possibly have unspecified other impact via crafted metadata.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1946/">CVE-2016-1946</cve>
	<bugzilla href="https://bugzilla.suse.com/963644">SUSE bug 963644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1947</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1947" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1947" ref_url="https://www.suse.com/security/cve/CVE-2016-1947" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of reputation data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-11"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1947/">CVE-2016-1947</cve>
	<bugzilla href="https://bugzilla.suse.com/963645">SUSE bug 963645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161949" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1949</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1949" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1949" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1949" ref_url="https://www.suse.com/security/cve/CVE-2016-1949" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0489-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0553-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00142.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that triggers spoofed responses to requests that use NPAPI, as demonstrated by a request for a crossdomain.xml file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1949/">CVE-2016-1949</cve>
	<bugzilla href="https://bugzilla.suse.com/966438">SUSE bug 966438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967087">SUSE bug 967087</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1950</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1950" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1950" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1950" ref_url="https://www.suse.com/security/cve/CVE-2016-1950" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1950/">CVE-2016-1950</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1952</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1952" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1952" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1952" ref_url="https://www.suse.com/security/cve/CVE-2016-1952" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1952/">CVE-2016-1952</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1953</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1953" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1953" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1953" ref_url="https://www.suse.com/security/cve/CVE-2016-1953" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-07"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1953/">CVE-2016-1953</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1954</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1954" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1954" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1954" ref_url="https://www.suse.com/security/cve/CVE-2016-1954" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1954/">CVE-2016-1954</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1955</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1955" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1955" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1955" ref_url="https://www.suse.com/security/cve/CVE-2016-1955" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy (CSP) violation report that contains path information associated with an IFRAME element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1955/">CVE-2016-1955</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1956</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1956" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1956" ref_url="https://www.suse.com/security/cve/CVE-2016-1956" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers to cause a denial of service (memory consumption or stack memory corruption) by triggering use of a WebGL shader.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1956/">CVE-2016-1956</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1957</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1957" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1957" ref_url="https://www.suse.com/security/cve/CVE-2016-1957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-1957/">CVE-2016-1957</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1958</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1958" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1958" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1958" ref_url="https://www.suse.com/security/cve/CVE-2016-1958" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
    <description>
    browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1958/">CVE-2016-1958</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1959</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1959" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1959" ref_url="https://www.suse.com/security/cve/CVE-2016-1959" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via unspecified use of the Clients API.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1959/">CVE-2016-1959</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1960</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1960" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1960" ref_url="https://www.suse.com/security/cve/CVE-2016-1960" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1960/">CVE-2016-1960</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1961</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1961" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1961" ref_url="https://www.suse.com/security/cve/CVE-2016-1961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1961/">CVE-2016-1961</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1962</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1962" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1962" ref_url="https://www.suse.com/security/cve/CVE-2016-1962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1962/">CVE-2016-1962</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1963</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1963" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1963" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1963" ref_url="https://www.suse.com/security/cve/CVE-2016-1963" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service (memory corruption) by changing a file during a FileReader API read operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1963/">CVE-2016-1963</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1964</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1964" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1964" ref_url="https://www.suse.com/security/cve/CVE-2016-1964" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1964/">CVE-2016-1964</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1965</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1965" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1965" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1965" ref_url="https://www.suse.com/security/cve/CVE-2016-1965" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1965/">CVE-2016-1965</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1966</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1966" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1966" ref_url="https://www.suse.com/security/cve/CVE-2016-1966" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
    <description>
    The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1966/">CVE-2016-1966</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1967</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1967" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1967" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1967" ref_url="https://www.suse.com/security/cve/CVE-2016-1967" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1967/">CVE-2016-1967</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161968" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1968</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1968" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1968" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1968" ref_url="https://www.suse.com/security/cve/CVE-2016-1968" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted data with brotli compression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1968/">CVE-2016-1968</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1970</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1970" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1970" ref_url="https://www.suse.com/security/cve/CVE-2016-1970" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1970/">CVE-2016-1970</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1971</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1971" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1971" ref_url="https://www.suse.com/security/cve/CVE-2016-1971" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status check, which might allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1971/">CVE-2016-1971</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1972</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1972" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1972" ref_url="https://www.suse.com/security/cve/CVE-2016-1972" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Race condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1972/">CVE-2016-1972</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1973</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1973" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1973" ref_url="https://www.suse.com/security/cve/CVE-2016-1973" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Race condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox before 45.0 might allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1973/">CVE-2016-1973</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1974</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1974" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1974" ref_url="https://www.suse.com/security/cve/CVE-2016-1974" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1974/">CVE-2016-1974</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1975</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1975" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1975" ref_url="https://www.suse.com/security/cve/CVE-2016-1975" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-1975/">CVE-2016-1975</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1976</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1976" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1976" ref_url="https://www.suse.com/security/cve/CVE-2016-1976" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-1976/">CVE-2016-1976</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970257">SUSE bug 970257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970377">SUSE bug 970377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970378">SUSE bug 970378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970379">SUSE bug 970379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970380">SUSE bug 970380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970381">SUSE bug 970381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970431">SUSE bug 970431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970433">SUSE bug 970433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1977</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1977" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1977" ref_url="https://www.suse.com/security/cve/CVE-2016-1977" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-07"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1977/">CVE-2016-1977</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1979</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1979" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1979" ref_url="https://www.suse.com/security/cve/CVE-2016-1979" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-07"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1979/">CVE-2016-1979</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1981</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-1981" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1981" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-1981" ref_url="https://www.suse.com/security/cve/CVE-2016-1981" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1981/">CVE-2016-1981</cve>
	<bugzilla href="https://bugzilla.suse.com/963782">SUSE bug 963782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963783">SUSE bug 963783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2037</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2037" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2037" ref_url="https://www.suse.com/security/cve/CVE-2016-2037" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002615.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0389-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00026.html" source="SUSE-SU"/>
    <description>
    The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-2037/">CVE-2016-2037</cve>
	<bugzilla href="https://bugzilla.suse.com/1028410">SUSE bug 1028410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963448">SUSE bug 963448</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480145" comment="cpio-2.12-1.439 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480146" comment="cpio-lang-2.12-1.439 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480147" comment="cpio-mt-2.12-1.439 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162047" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2047</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2047" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2047" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2047" ref_url="https://www.suse.com/security/cve/CVE-2016-2047" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1686-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html" source="SUSE-SU"/>
    <description>
    The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2047/">CVE-2016-2047</cve>
	<bugzilla href="https://bugzilla.suse.com/963806">SUSE bug 963806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976341">SUSE bug 976341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980904">SUSE bug 980904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2087</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2087" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2087" ref_url="https://www.suse.com/security/cve/CVE-2016-2087" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2872-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007528.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2087/">CVE-2016-2087</cve>
	<bugzilla href="https://bugzilla.suse.com/1020739">SUSE bug 1020739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334362" comment="hexchat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337780" comment="hexchat-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337781" comment="hexchat-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337782" comment="hexchat-plugins-lua is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337783" comment="hexchat-plugins-perl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337784" comment="hexchat-plugins-python3 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2088</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2088" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2088" ref_url="https://www.suse.com/security/cve/CVE-2016-2088" source="SUSE CVE"/>
    <description>
    resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2088/">CVE-2016-2088</cve>
	<bugzilla href="https://bugzilla.suse.com/970074">SUSE bug 970074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2089</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2089" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2089" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2089" ref_url="https://www.suse.com/security/cve/CVE-2016-2089" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0408-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0413-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-02/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2089/">CVE-2016-2089</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/963983">SUSE bug 963983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2099</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2099" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2099" ref_url="https://www.suse.com/security/cve/CVE-2016-2099" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2154-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1744-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1808-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00013.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2099/">CVE-2016-2099</cve>
	<bugzilla href="https://bugzilla.suse.com/979208">SUSE bug 979208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481575" comment="libxerces-c-3_1-3.1.4-3.3.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481576" comment="libxerces-c-devel-3.1.4-3.3.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2105</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2105" ref_url="https://www.suse.com/security/cve/CVE-2016-2105" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7017583" ref_url="https://www.suse.com/support/kb/doc/?id=7017583" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2105/">CVE-2016-2105</cve>
	<bugzilla href="https://bugzilla.suse.com/977584">SUSE bug 977584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977614">SUSE bug 977614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978492">SUSE bug 978492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989902">SUSE bug 989902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990369">SUSE bug 990369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990370">SUSE bug 990370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2106</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2106" ref_url="https://www.suse.com/security/cve/CVE-2016-2106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7017583" ref_url="https://www.suse.com/support/kb/doc/?id=7017583" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2106/">CVE-2016-2106</cve>
	<bugzilla href="https://bugzilla.suse.com/977584">SUSE bug 977584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977615">SUSE bug 977615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978492">SUSE bug 978492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979279">SUSE bug 979279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990369">SUSE bug 990369</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2107</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2107" ref_url="https://www.suse.com/security/cve/CVE-2016-2107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7017583" ref_url="https://www.suse.com/support/kb/doc/?id=7017583" source="SUSE-SU"/>
		<reference ref_id="TID7017793" ref_url="https://www.suse.com/support/kb/doc/?id=7017793" source="SUSE-SU"/>
		<reference ref_id="TID7017881" ref_url="https://www.suse.com/support/kb/doc/?id=7017881" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html" source="SUSE-SU"/>
    <description>
    The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2107/">CVE-2016-2107</cve>
	<bugzilla href="https://bugzilla.suse.com/976942">SUSE bug 976942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977584">SUSE bug 977584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977616">SUSE bug 977616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978492">SUSE bug 978492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990369">SUSE bug 990369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990370">SUSE bug 990370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2109</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2109" ref_url="https://www.suse.com/security/cve/CVE-2016-2109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7017583" ref_url="https://www.suse.com/support/kb/doc/?id=7017583" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html" source="SUSE-SU"/>
    <description>
    The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2109/">CVE-2016-2109</cve>
	<bugzilla href="https://bugzilla.suse.com/1015243">SUSE bug 1015243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976942">SUSE bug 976942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977584">SUSE bug 977584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978492">SUSE bug 978492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990369">SUSE bug 990369</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2110</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2110" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2110" ref_url="https://www.suse.com/security/cve/CVE-2016-2110" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1440-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00124.html" source="SUSE-SU"/>
    <description>
    The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2110/">CVE-2016-2110</cve>
	<bugzilla href="https://bugzilla.suse.com/1009711">SUSE bug 1009711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973031">SUSE bug 973031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973033">SUSE bug 973033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973036">SUSE bug 973036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2111</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2111" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2111" ref_url="https://www.suse.com/security/cve/CVE-2016-2111" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2111/">CVE-2016-2111</cve>
	<bugzilla href="https://bugzilla.suse.com/973032">SUSE bug 973032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2112</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2112" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2112" ref_url="https://www.suse.com/security/cve/CVE-2016-2112" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2112/">CVE-2016-2112</cve>
	<bugzilla href="https://bugzilla.suse.com/973031">SUSE bug 973031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973033">SUSE bug 973033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2113</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2113" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2113" ref_url="https://www.suse.com/security/cve/CVE-2016-2113" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2113/">CVE-2016-2113</cve>
	<bugzilla href="https://bugzilla.suse.com/973031">SUSE bug 973031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973033">SUSE bug 973033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973034">SUSE bug 973034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2115</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2115" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2115" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2115" ref_url="https://www.suse.com/security/cve/CVE-2016-2115" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2115/">CVE-2016-2115</cve>
	<bugzilla href="https://bugzilla.suse.com/973036">SUSE bug 973036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2116</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2116" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2116" ref_url="https://www.suse.com/security/cve/CVE-2016-2116" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-2116/">CVE-2016-2116</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968373">SUSE bug 968373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2118</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2118" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2118" ref_url="https://www.suse.com/security/cve/CVE-2016-2118" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="TID7017473" ref_url="https://www.suse.com/support/kb/doc?id=7017473" source="SUSE-SU"/>
		<reference ref_id="TID7017482" ref_url="https://www.suse.com/support/kb/doc/?id=7017482" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2118/">CVE-2016-2118</cve>
	<bugzilla href="https://bugzilla.suse.com/971965">SUSE bug 971965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975276">SUSE bug 975276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977416">SUSE bug 977416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2119</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2119" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2119" ref_url="https://www.suse.com/security/cve/CVE-2016-2119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002273.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002341.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1830-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2371-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00086.html" source="SUSE-SU"/>
    <description>
    libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the (1) SMB2_SESSION_FLAG_IS_GUEST or (2) SMB2_SESSION_FLAG_IS_NULL flag.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2119/">CVE-2016-2119</cve>
	<bugzilla href="https://bugzilla.suse.com/986869">SUSE bug 986869</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2123</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2123" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2123" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2123" ref_url="https://www.suse.com/security/cve/CVE-2016-2123" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002526.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002535.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0020-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0021-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00010.html" source="SUSE-SU"/>
    <description>
    A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2123/">CVE-2016-2123</cve>
	<bugzilla href="https://bugzilla.suse.com/1014437">SUSE bug 1014437</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2124</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2124" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2124" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2124" ref_url="https://www.suse.com/security/cve/CVE-2016-2124" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009831.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009832.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:28-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:29-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:30-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:49-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009716.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009713.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009714.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009729.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009750.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010209.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1471-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6W4QSQCTUGSIZCTRT4FGJNMRLZDUZS6Y/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3647-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/36K5HNX67LYX5XOVQRL3MSIC5YSJ5M5W/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3650-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7ZU5FWTEOBTHR7WNP3HEICT3NJTBNV2V/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3674-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYEHJEQQ7LEL2T775B7QLR3IFR6LJGLZ/" source="SUSE-SU"/>
    <description>
    A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2124/">CVE-2016-2124</cve>
	<bugzilla href="https://bugzilla.suse.com/1014440">SUSE bug 1014440</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009654816" comment="ctdb-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654817" comment="ctdb-pcp-pmda-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654818" comment="ctdb-tests-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654819" comment="libdcerpc-binding0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654820" comment="libdcerpc-binding0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654821" comment="libdcerpc-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654822" comment="libdcerpc-samr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654823" comment="libdcerpc-samr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654824" comment="libdcerpc-samr0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654825" comment="libdcerpc0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654826" comment="libdcerpc0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654827" comment="libndr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654828" comment="libndr-krb5pac-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654829" comment="libndr-krb5pac0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654830" comment="libndr-krb5pac0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654831" comment="libndr-nbt-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654832" comment="libndr-nbt0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654833" comment="libndr-nbt0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654834" comment="libndr-standard-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654835" comment="libndr-standard0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654836" comment="libndr-standard0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654837" comment="libndr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654838" comment="libndr0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654839" comment="libnetapi-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654840" comment="libnetapi-devel-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654841" comment="libnetapi0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654842" comment="libnetapi0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654843" comment="libsamba-credentials-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654844" comment="libsamba-credentials0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654845" comment="libsamba-credentials0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654846" comment="libsamba-errors-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654847" comment="libsamba-errors0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654848" comment="libsamba-errors0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654849" comment="libsamba-hostconfig-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654850" comment="libsamba-hostconfig0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654851" comment="libsamba-hostconfig0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654852" comment="libsamba-passdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654853" comment="libsamba-passdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654854" comment="libsamba-passdb0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654855" comment="libsamba-policy-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654856" comment="libsamba-policy-python-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654857" comment="libsamba-policy-python3-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654858" comment="libsamba-policy0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654859" comment="libsamba-policy0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654860" comment="libsamba-policy0-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654861" comment="libsamba-policy0-python3-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654862" comment="libsamba-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654863" comment="libsamba-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654864" comment="libsamba-util0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654865" comment="libsamdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654866" comment="libsamdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654867" comment="libsamdb0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654868" comment="libsmbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654869" comment="libsmbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654870" comment="libsmbclient0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654871" comment="libsmbconf-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654872" comment="libsmbconf0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654873" comment="libsmbconf0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654874" comment="libsmbldap-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654875" comment="libsmbldap2-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654876" comment="libsmbldap2-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654877" comment="libtevent-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654878" comment="libtevent-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654879" comment="libtevent-util0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654880" comment="libwbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654881" comment="libwbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654882" comment="libwbclient0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654883" comment="samba-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654884" comment="samba-ad-dc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654885" comment="samba-ad-dc-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654886" comment="samba-ceph-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654887" comment="samba-client-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654888" comment="samba-client-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654889" comment="samba-core-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654890" comment="samba-doc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654891" comment="samba-dsdb-modules-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654892" comment="samba-libs-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654893" comment="samba-libs-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654894" comment="samba-libs-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654895" comment="samba-libs-python-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654896" comment="samba-libs-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654897" comment="samba-libs-python3-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654898" comment="samba-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654899" comment="samba-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654900" comment="samba-test-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654901" comment="samba-winbind-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654902" comment="samba-winbind-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009654913" comment="libdcerpc-binding0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654914" comment="libdcerpc-binding0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654915" comment="libdcerpc-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654916" comment="libdcerpc-samr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654917" comment="libdcerpc-samr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654918" comment="libdcerpc0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654919" comment="libdcerpc0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654920" comment="libndr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654921" comment="libndr-krb5pac-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654922" comment="libndr-krb5pac0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654923" comment="libndr-krb5pac0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654924" comment="libndr-nbt-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654925" comment="libndr-nbt0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654926" comment="libndr-nbt0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654927" comment="libndr-standard-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654928" comment="libndr-standard0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654929" comment="libndr-standard0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654930" comment="libndr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654931" comment="libndr0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654932" comment="libnetapi-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654933" comment="libnetapi0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654934" comment="libnetapi0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654935" comment="libsamba-credentials-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654936" comment="libsamba-credentials0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654937" comment="libsamba-credentials0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654938" comment="libsamba-errors-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654939" comment="libsamba-errors0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654940" comment="libsamba-errors0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654941" comment="libsamba-hostconfig-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654942" comment="libsamba-hostconfig0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654943" comment="libsamba-hostconfig0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654944" comment="libsamba-passdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654945" comment="libsamba-passdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654946" comment="libsamba-passdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654947" comment="libsamba-policy-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654948" comment="libsamba-policy-python3-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654949" comment="libsamba-policy0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654950" comment="libsamba-policy0-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654951" comment="libsamba-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654952" comment="libsamba-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654953" comment="libsamba-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654954" comment="libsamdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654955" comment="libsamdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654956" comment="libsamdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654957" comment="libsmbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654958" comment="libsmbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654959" comment="libsmbconf-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654960" comment="libsmbconf0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654961" comment="libsmbconf0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654962" comment="libsmbldap-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654963" comment="libsmbldap2-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654964" comment="libsmbldap2-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654965" comment="libtevent-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654966" comment="libtevent-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654967" comment="libtevent-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654968" comment="libwbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654969" comment="libwbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654970" comment="libwbclient0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654971" comment="samba-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654972" comment="samba-ad-dc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654973" comment="samba-client-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654974" comment="samba-core-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654975" comment="samba-dsdb-modules-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654976" comment="samba-libs-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654977" comment="samba-libs-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654978" comment="samba-libs-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654979" comment="samba-libs-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654980" comment="samba-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654981" comment="samba-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654982" comment="samba-winbind-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654983" comment="samba-winbind-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009654913" comment="libdcerpc-binding0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654914" comment="libdcerpc-binding0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654915" comment="libdcerpc-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654916" comment="libdcerpc-samr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654917" comment="libdcerpc-samr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654918" comment="libdcerpc0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654919" comment="libdcerpc0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654920" comment="libndr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654921" comment="libndr-krb5pac-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654922" comment="libndr-krb5pac0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654923" comment="libndr-krb5pac0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654924" comment="libndr-nbt-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654925" comment="libndr-nbt0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654926" comment="libndr-nbt0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654927" comment="libndr-standard-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654928" comment="libndr-standard0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654929" comment="libndr-standard0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654930" comment="libndr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654931" comment="libndr0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654932" comment="libnetapi-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654933" comment="libnetapi0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654934" comment="libnetapi0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654935" comment="libsamba-credentials-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654936" comment="libsamba-credentials0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654937" comment="libsamba-credentials0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654938" comment="libsamba-errors-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654939" comment="libsamba-errors0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654940" comment="libsamba-errors0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654941" comment="libsamba-hostconfig-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654942" comment="libsamba-hostconfig0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654943" comment="libsamba-hostconfig0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654944" comment="libsamba-passdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654945" comment="libsamba-passdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654946" comment="libsamba-passdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654947" comment="libsamba-policy-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654948" comment="libsamba-policy-python3-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654949" comment="libsamba-policy0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654950" comment="libsamba-policy0-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654951" comment="libsamba-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654952" comment="libsamba-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654953" comment="libsamba-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654954" comment="libsamdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654955" comment="libsamdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654956" comment="libsamdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654957" comment="libsmbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654958" comment="libsmbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654959" comment="libsmbconf-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654960" comment="libsmbconf0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654961" comment="libsmbconf0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654962" comment="libsmbldap-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654963" comment="libsmbldap2-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654964" comment="libsmbldap2-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654965" comment="libtevent-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654966" comment="libtevent-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654967" comment="libtevent-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654968" comment="libwbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654969" comment="libwbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654970" comment="libwbclient0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654971" comment="samba-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654972" comment="samba-ad-dc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656886" comment="samba-ceph-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654973" comment="samba-client-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654974" comment="samba-core-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654975" comment="samba-dsdb-modules-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654976" comment="samba-libs-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654977" comment="samba-libs-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654978" comment="samba-libs-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654979" comment="samba-libs-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654980" comment="samba-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654981" comment="samba-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654982" comment="samba-winbind-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654983" comment="samba-winbind-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009654998" comment="libdcerpc-binding0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654914" comment="libdcerpc-binding0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654999" comment="libdcerpc-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655000" comment="libdcerpc-samr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655001" comment="libdcerpc-samr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655002" comment="libdcerpc0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654919" comment="libdcerpc0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655003" comment="libndr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655004" comment="libndr-krb5pac-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655005" comment="libndr-krb5pac0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654923" comment="libndr-krb5pac0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655006" comment="libndr-nbt-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655007" comment="libndr-nbt0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654926" comment="libndr-nbt0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655008" comment="libndr-standard-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655009" comment="libndr-standard0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654929" comment="libndr-standard0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655010" comment="libndr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654931" comment="libndr0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655011" comment="libnetapi-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655012" comment="libnetapi0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654934" comment="libnetapi0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655013" comment="libsamba-credentials-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655014" comment="libsamba-credentials0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654937" comment="libsamba-credentials0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655015" comment="libsamba-errors-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655016" comment="libsamba-errors0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654940" comment="libsamba-errors0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655017" comment="libsamba-hostconfig-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655018" comment="libsamba-hostconfig0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654943" comment="libsamba-hostconfig0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655019" comment="libsamba-passdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655020" comment="libsamba-passdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654946" comment="libsamba-passdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655021" comment="libsamba-policy-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655022" comment="libsamba-policy-python3-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655023" comment="libsamba-policy0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655024" comment="libsamba-policy0-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655025" comment="libsamba-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655026" comment="libsamba-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654953" comment="libsamba-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655027" comment="libsamdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655028" comment="libsamdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654956" comment="libsamdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655029" comment="libsmbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655030" comment="libsmbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655031" comment="libsmbconf-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655032" comment="libsmbconf0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654961" comment="libsmbconf0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655033" comment="libsmbldap-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655034" comment="libsmbldap2-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654964" comment="libsmbldap2-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655035" comment="libtevent-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655036" comment="libtevent-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654967" comment="libtevent-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655037" comment="libwbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655038" comment="libwbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654970" comment="libwbclient0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655039" comment="samba-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655040" comment="samba-ad-dc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655041" comment="samba-client-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655042" comment="samba-core-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655043" comment="samba-dsdb-modules-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655044" comment="samba-libs-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654977" comment="samba-libs-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655045" comment="samba-libs-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655046" comment="samba-libs-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655047" comment="samba-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655048" comment="samba-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655049" comment="samba-winbind-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654983" comment="samba-winbind-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009655116" comment="libdcerpc-binding0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654914" comment="libdcerpc-binding0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655117" comment="libdcerpc-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655118" comment="libdcerpc-samr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655119" comment="libdcerpc-samr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655120" comment="libdcerpc0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654919" comment="libdcerpc0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655121" comment="libndr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655122" comment="libndr-krb5pac-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655123" comment="libndr-krb5pac0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654923" comment="libndr-krb5pac0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655124" comment="libndr-nbt-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655125" comment="libndr-nbt0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654926" comment="libndr-nbt0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655126" comment="libndr-standard-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655127" comment="libndr-standard0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654929" comment="libndr-standard0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655128" comment="libndr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654931" comment="libndr0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655129" comment="libnetapi-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655130" comment="libnetapi0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654934" comment="libnetapi0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655131" comment="libsamba-credentials-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655132" comment="libsamba-credentials0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654937" comment="libsamba-credentials0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655133" comment="libsamba-errors-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655134" comment="libsamba-errors0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654940" comment="libsamba-errors0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655135" comment="libsamba-hostconfig-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655136" comment="libsamba-hostconfig0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654943" comment="libsamba-hostconfig0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655137" comment="libsamba-passdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655138" comment="libsamba-passdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654946" comment="libsamba-passdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655139" comment="libsamba-policy-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655140" comment="libsamba-policy-python3-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655141" comment="libsamba-policy0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655142" comment="libsamba-policy0-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655143" comment="libsamba-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655144" comment="libsamba-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654953" comment="libsamba-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655145" comment="libsamdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655146" comment="libsamdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654956" comment="libsamdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655147" comment="libsmbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655148" comment="libsmbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655149" comment="libsmbconf-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655150" comment="libsmbconf0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654961" comment="libsmbconf0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655151" comment="libsmbldap-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655152" comment="libsmbldap2-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654964" comment="libsmbldap2-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655153" comment="libtevent-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655154" comment="libtevent-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654967" comment="libtevent-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655155" comment="libwbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655156" comment="libwbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654970" comment="libwbclient0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655157" comment="samba-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655158" comment="samba-ad-dc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655160" comment="samba-client-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655161" comment="samba-core-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655162" comment="samba-dsdb-modules-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655163" comment="samba-libs-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654977" comment="samba-libs-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655164" comment="samba-libs-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655165" comment="samba-libs-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655166" comment="samba-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655167" comment="samba-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655168" comment="samba-winbind-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654983" comment="samba-winbind-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009656803" comment="libdcerpc-binding0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654914" comment="libdcerpc-binding0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656804" comment="libdcerpc-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656805" comment="libdcerpc-samr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656806" comment="libdcerpc-samr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656807" comment="libdcerpc0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654919" comment="libdcerpc0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656808" comment="libndr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656809" comment="libndr-krb5pac-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656810" comment="libndr-krb5pac0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654923" comment="libndr-krb5pac0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656811" comment="libndr-nbt-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656812" comment="libndr-nbt0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654926" comment="libndr-nbt0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656813" comment="libndr-standard-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656814" comment="libndr-standard0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654929" comment="libndr-standard0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656815" comment="libndr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654931" comment="libndr0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656816" comment="libnetapi-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656817" comment="libnetapi0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654934" comment="libnetapi0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656818" comment="libsamba-credentials-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656819" comment="libsamba-credentials0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654937" comment="libsamba-credentials0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656820" comment="libsamba-errors-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656821" comment="libsamba-errors0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654940" comment="libsamba-errors0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656822" comment="libsamba-hostconfig-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656823" comment="libsamba-hostconfig0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654943" comment="libsamba-hostconfig0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656824" comment="libsamba-passdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656825" comment="libsamba-passdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654946" comment="libsamba-passdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656826" comment="libsamba-policy-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656827" comment="libsamba-policy-python3-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655341" comment="libsamba-policy0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656828" comment="libsamba-policy0-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656829" comment="libsamba-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656830" comment="libsamba-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654953" comment="libsamba-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656831" comment="libsamdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656832" comment="libsamdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654956" comment="libsamdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656833" comment="libsmbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656834" comment="libsmbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656835" comment="libsmbconf-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656836" comment="libsmbconf0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654961" comment="libsmbconf0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656837" comment="libsmbldap-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656838" comment="libsmbldap2-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654964" comment="libsmbldap2-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656839" comment="libtevent-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656840" comment="libtevent-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654967" comment="libtevent-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656841" comment="libwbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656842" comment="libwbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654970" comment="libwbclient0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656843" comment="samba-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656844" comment="samba-ad-dc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656845" comment="samba-client-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656846" comment="samba-core-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656847" comment="samba-dsdb-modules-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656848" comment="samba-libs-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654977" comment="samba-libs-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655343" comment="samba-libs-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656849" comment="samba-libs-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655345" comment="samba-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656850" comment="samba-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656851" comment="samba-winbind-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654983" comment="samba-winbind-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2125</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2125" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2125" ref_url="https://www.suse.com/security/cve/CVE-2016-2125" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002526.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002534.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0020-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0021-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00010.html" source="SUSE-SU"/>
    <description>
    It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2125/">CVE-2016-2125</cve>
	<bugzilla href="https://bugzilla.suse.com/1014441">SUSE bug 1014441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2126</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2126" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2126" ref_url="https://www.suse.com/security/cve/CVE-2016-2126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002526.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002527.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002534.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0020-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0021-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00010.html" source="SUSE-SU"/>
    <description>
    Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2126/">CVE-2016-2126</cve>
	<bugzilla href="https://bugzilla.suse.com/1014442">SUSE bug 1014442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2147</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2147" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2147" ref_url="https://www.suse.com/security/cve/CVE-2016-2147" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-08"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2147/">CVE-2016-2147</cve>
	<bugzilla href="https://bugzilla.suse.com/970663">SUSE bug 970663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663736" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663741" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663750" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663751" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663766" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663767" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2148</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2148" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2148" ref_url="https://www.suse.com/security/cve/CVE-2016-2148" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2148/">CVE-2016-2148</cve>
	<bugzilla href="https://bugzilla.suse.com/970662">SUSE bug 970662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338984" comment="busybox is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663736" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663741" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663750" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663751" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663766" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663767" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2150</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2150" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2150" ref_url="https://www.suse.com/security/cve/CVE-2016-2150" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1559-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002108.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1561-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:14744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008966.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1725-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html" source="SUSE-SU"/>
    <description>
    SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2150/">CVE-2016-2150</cve>
	<bugzilla href="https://bugzilla.suse.com/982385">SUSE bug 982385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982386">SUSE bug 982386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488364" comment="libspice-server-devel-0.14.1-2.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488365" comment="libspice-server1-0.14.1-2.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2161</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2161" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2161" ref_url="https://www.suse.com/security/cve/CVE-2016-2161" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002741.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0897-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0903-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00120.html" source="SUSE-SU"/>
    <description>
    In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2161/">CVE-2016-2161</cve>
	<bugzilla href="https://bugzilla.suse.com/1016714">SUSE bug 1016714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033513">SUSE bug 1033513</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2167</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2167" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2167" ref_url="https://www.suse.com/security/cve/CVE-2016-2167" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1263-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1264-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00044.html" source="SUSE-SU"/>
    <description>
    The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repository realm string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2167/">CVE-2016-2167</cve>
	<bugzilla href="https://bugzilla.suse.com/976849">SUSE bug 976849</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2168</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2168" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2168" ref_url="https://www.suse.com/security/cve/CVE-2016-2168" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1263-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1264-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00044.html" source="SUSE-SU"/>
    <description>
    The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2168/">CVE-2016-2168</cve>
	<bugzilla href="https://bugzilla.suse.com/976850">SUSE bug 976850</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2175</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2175" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2175" ref_url="https://www.suse.com/security/cve/CVE-2016-2175" source="SUSE CVE"/>
    <description>
    Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2175/">CVE-2016-2175</cve>
	<bugzilla href="https://bugzilla.suse.com/1100006">SUSE bug 1100006</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487732" comment="apache-pdfbox-1.8.12-5.6.3 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2176</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2176" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2176" ref_url="https://www.suse.com/security/cve/CVE-2016-2176" source="SUSE CVE"/>
		<reference ref_id="TID7017583" ref_url="https://www.suse.com/support/kb/doc/?id=7017583" source="SUSE-SU"/>
    <description>
    The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2176/">CVE-2016-2176</cve>
	<bugzilla href="https://bugzilla.suse.com/978224">SUSE bug 978224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990369">SUSE bug 990369</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2177</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2177" ref_url="https://www.suse.com/security/cve/CVE-2016-2177" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2177/">CVE-2016-2177</cve>
	<bugzilla href="https://bugzilla.suse.com/982575">SUSE bug 982575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999075">SUSE bug 999075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2178</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2178" ref_url="https://www.suse.com/security/cve/CVE-2016-2178" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2178/">CVE-2016-2178</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983249">SUSE bug 983249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983519">SUSE bug 983519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2179</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2179" ref_url="https://www.suse.com/security/cve/CVE-2016-2179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2179/">CVE-2016-2179</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994844">SUSE bug 994844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2180</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2180" ref_url="https://www.suse.com/security/cve/CVE-2016-2180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the "openssl ts" command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2180/">CVE-2016-2180</cve>
	<bugzilla href="https://bugzilla.suse.com/1003811">SUSE bug 1003811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990419">SUSE bug 990419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2181</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2181" ref_url="https://www.suse.com/security/cve/CVE-2016-2181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2181/">CVE-2016-2181</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994749">SUSE bug 994749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994844">SUSE bug 994844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2182</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2182" ref_url="https://www.suse.com/security/cve/CVE-2016-2182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2182/">CVE-2016-2182</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/993819">SUSE bug 993819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994844">SUSE bug 994844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995959">SUSE bug 995959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2183</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2183" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2183" ref_url="https://www.suse.com/security/cve/CVE-2016-2183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002706.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0720-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002707.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0726-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002708.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002742.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7017985" ref_url="https://www.suse.com/support/kb/doc/?id=7017985" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="TID7020150" ref_url="https://www.suse.com/support/kb/doc/?id=7020150" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2183/">CVE-2016-2183</cve>
	<bugzilla href="https://bugzilla.suse.com/1001912">SUSE bug 1001912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1027038">SUSE bug 1027038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034689">SUSE bug 1034689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056614">SUSE bug 1056614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171693">SUSE bug 1171693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994844">SUSE bug 994844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995359">SUSE bug 995359</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488397" comment="libwsman-devel-2.6.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488398" comment="libwsman3-2.6.7-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488399" comment="openwsman-server-2.6.7-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2187</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2187" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2187" ref_url="https://www.suse.com/security/cve/CVE-2016-2187" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
    <description>
    The gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2187/">CVE-2016-2187</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/971919">SUSE bug 971919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/971944">SUSE bug 971944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2193</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2193" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2193" ref_url="https://www.suse.com/security/cve/CVE-2016-2193" source="SUSE CVE"/>
    <description>
    PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-18"/>
	<updated date="2023-09-07"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2193/">CVE-2016-2193</cve>
	<bugzilla href="https://bugzilla.suse.com/978456">SUSE bug 978456</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334083" comment="postgresql is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654611" comment="postgresql-test is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334083" comment="postgresql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336201" comment="postgresql-contrib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335927" comment="postgresql-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336202" comment="postgresql-docs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336203" comment="postgresql-plperl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336204" comment="postgresql-plpython is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336205" comment="postgresql-pltcl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336206" comment="postgresql-server is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336207" comment="postgresql-server-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2198</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2198" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2198" ref_url="https://www.suse.com/security/cve/CVE-2016-2198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2198/">CVE-2016-2198</cve>
	<bugzilla href="https://bugzilla.suse.com/964413">SUSE bug 964413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964415">SUSE bug 964415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2226</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2226" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2226" ref_url="https://www.suse.com/security/cve/CVE-2016-2226" source="SUSE CVE"/>
    <description>
    Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2226/">CVE-2016-2226</cve>
	<bugzilla href="https://bugzilla.suse.com/978812">SUSE bug 978812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336299" comment="cpp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334154" comment="gcc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336300" comment="gcc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631671" comment="gcc-PIE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336363" comment="gcc-ada is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336301" comment="gcc-c++ is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336350" comment="gcc-c++-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336357" comment="gcc-fortran is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631672" comment="gcc-fortran-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336304" comment="gcc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336349" comment="gcc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336360" comment="gcc-objc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336305" comment="libstdc++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336351" comment="libstdc++-devel-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2233</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2233" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2233" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2233" ref_url="https://www.suse.com/security/cve/CVE-2016-2233" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2233/">CVE-2016-2233</cve>
	<bugzilla href="https://bugzilla.suse.com/1020738">SUSE bug 1020738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334362" comment="hexchat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337780" comment="hexchat-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337781" comment="hexchat-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337782" comment="hexchat-plugins-lua is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337783" comment="hexchat-plugins-perl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337784" comment="hexchat-plugins-python3 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2270</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2270" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2270" ref_url="https://www.suse.com/security/cve/CVE-2016-2270" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.8/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2270/">CVE-2016-2270</cve>
	<bugzilla href="https://bugzilla.suse.com/965315">SUSE bug 965315</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2271</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2271" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2271" ref_url="https://www.suse.com/security/cve/CVE-2016-2271" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2271/">CVE-2016-2271</cve>
	<bugzilla href="https://bugzilla.suse.com/965317">SUSE bug 965317</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162315" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2315</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2315" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2315" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2315" ref_url="https://www.suse.com/security/cve/CVE-2016-2315" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0796-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0798-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0803-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0826-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2315/">CVE-2016-2315</cve>
	<bugzilla href="https://bugzilla.suse.com/971328">SUSE bug 971328</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481138" comment="git-core-2.16.4-3.9.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487750" comment="git-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487751" comment="git-arch-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487752" comment="git-cvs-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487753" comment="git-daemon-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487754" comment="git-doc-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487755" comment="git-email-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487756" comment="git-gui-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487757" comment="git-svn-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487758" comment="git-web-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487759" comment="gitk-2.16.4-3.9.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2324</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2324" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2324" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2324" ref_url="https://www.suse.com/security/cve/CVE-2016-2324" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0796-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0798-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0803-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0826-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0829-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2324/">CVE-2016-2324</cve>
	<bugzilla href="https://bugzilla.suse.com/971328">SUSE bug 971328</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481138" comment="git-core-2.16.4-3.9.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487750" comment="git-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487751" comment="git-arch-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487752" comment="git-cvs-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487753" comment="git-daemon-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487754" comment="git-doc-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487755" comment="git-email-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487756" comment="git-gui-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487757" comment="git-svn-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487758" comment="git-web-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487759" comment="gitk-2.16.4-3.9.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162334" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2334</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2334" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2334" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2334" ref_url="https://www.suse.com/security/cve/CVE-2016-2334" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2334/">CVE-2016-2334</cve>
	<bugzilla href="https://bugzilla.suse.com/979822">SUSE bug 979822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480858" comment="p7zip-16.02-5.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162335" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2335</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2335" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2335" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2335" ref_url="https://www.suse.com/security/cve/CVE-2016-2335" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1464-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1675-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1850-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00069.html" source="SUSE-SU"/>
    <description>
    The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2335/">CVE-2016-2335</cve>
	<bugzilla href="https://bugzilla.suse.com/979823">SUSE bug 979823</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480858" comment="p7zip-16.02-5.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2338</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2338" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2338" ref_url="https://www.suse.com/security/cve/CVE-2016-2338" source="SUSE CVE"/>
    <description>
    An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array size after mentioned allocation and cause heap overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-16"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2338/">CVE-2016-2338</cve>
	<bugzilla href="https://bugzilla.suse.com/1204205">SUSE bug 1204205</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2342</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2342" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2342" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2342" ref_url="https://www.suse.com/security/cve/CVE-2016-2342" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0936-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/001979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0946-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/001980.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0863-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0888-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00117.html" source="SUSE-SU"/>
    <description>
    The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a Labeled-VPN SAFI routes-data length field during a data copy, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2342/">CVE-2016-2342</cve>
	<bugzilla href="https://bugzilla.suse.com/970952">SUSE bug 970952</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488182" comment="libfpm_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488183" comment="libospf0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488184" comment="libospfapiclient0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488185" comment="libquagga_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488186" comment="libzebra1-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488187" comment="quagga-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488188" comment="quagga-devel-1.1.1-2.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2384</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2384" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2384" ref_url="https://www.suse.com/security/cve/CVE-2016-2384" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1032-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1033-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1037-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1038-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1045-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1046-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (panic) or possibly have unspecified other impact via vectors involving an invalid USB descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2384/">CVE-2016-2384</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/966693">SUSE bug 966693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967773">SUSE bug 967773</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2391</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2391" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2391" ref_url="https://www.suse.com/security/cve/CVE-2016-2391" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2391/">CVE-2016-2391</cve>
	<bugzilla href="https://bugzilla.suse.com/967012">SUSE bug 967012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967013">SUSE bug 967013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967101">SUSE bug 967101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2392</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2392" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2392" ref_url="https://www.suse.com/security/cve/CVE-2016-2392" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2392/">CVE-2016-2392</cve>
	<bugzilla href="https://bugzilla.suse.com/967012">SUSE bug 967012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/967090">SUSE bug 967090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2399</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2399" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2399" ref_url="https://www.suse.com/security/cve/CVE-2016-2399" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002681.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1986-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0552-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00102.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2399/">CVE-2016-2399</cve>
	<bugzilla href="https://bugzilla.suse.com/1022805">SUSE bug 1022805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486491" comment="libquicktime-1.2.4cvs20150223-4.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486492" comment="libquicktime-devel-1.2.4cvs20150223-4.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486493" comment="libquicktime0-1.2.4cvs20150223-4.42 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2464</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2464" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2464" ref_url="https://www.suse.com/security/cve/CVE-2016-2464" source="SUSE CVE"/>
    <description>
    libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted mkv file, aka internal bug 23167726.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2464/">CVE-2016-2464</cve>
	<bugzilla href="https://bugzilla.suse.com/984448">SUSE bug 984448</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480779" comment="libvpx4-1.6.1-4.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486513" comment="libvpx-devel-1.6.1-4.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2510</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2510" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2510" ref_url="https://www.suse.com/security/cve/CVE-2016-2510" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00078.html" source="SUSE-SU"/>
    <description>
    BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2510/">CVE-2016-2510</cve>
	<bugzilla href="https://bugzilla.suse.com/967593">SUSE bug 967593</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487621" comment="bsh2-2.0.0.b6-3.102 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487622" comment="bsh2-classgen-2.0.0.b6-3.102 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487623" comment="bsh2-javadoc-2.0.0.b6-3.102 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2516</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2516" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2516" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2516" ref_url="https://www.suse.com/security/cve/CVE-2016-2516" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in an unconfig directive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2516/">CVE-2016-2516</cve>
	<bugzilla href="https://bugzilla.suse.com/977446">SUSE bug 977446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977452">SUSE bug 977452</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2517</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2517" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2517" ref_url="https://www.suse.com/security/cve/CVE-2016-2517" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey.  NOTE: this vulnerability exists because of a CVE-2016-2516 regression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2517/">CVE-2016-2517</cve>
	<bugzilla href="https://bugzilla.suse.com/977446">SUSE bug 977446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977455">SUSE bug 977455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2518</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2518" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2518" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2518" ref_url="https://www.suse.com/security/cve/CVE-2016-2518" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-2518/">CVE-2016-2518</cve>
	<bugzilla href="https://bugzilla.suse.com/977446">SUSE bug 977446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977457">SUSE bug 977457</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2519</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2519" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2519" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2519" ref_url="https://www.suse.com/security/cve/CVE-2016-2519" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html" source="SUSE-SU"/>
    <description>
    ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2519/">CVE-2016-2519</cve>
	<bugzilla href="https://bugzilla.suse.com/959243">SUSE bug 959243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977446">SUSE bug 977446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977458">SUSE bug 977458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2522</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2522" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2522" ref_url="https://www.suse.com/security/cve/CVE-2016-2522" source="SUSE CVE"/>
    <description>
    The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2522/">CVE-2016-2522</cve>
	<bugzilla href="https://bugzilla.suse.com/968565">SUSE bug 968565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2523</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2523" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2523" ref_url="https://www.suse.com/security/cve/CVE-2016-2523" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0660-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0661-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html" source="SUSE-SU"/>
    <description>
    The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2523/">CVE-2016-2523</cve>
	<bugzilla href="https://bugzilla.suse.com/968565">SUSE bug 968565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2524</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2524" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2524" ref_url="https://www.suse.com/security/cve/CVE-2016-2524" source="SUSE CVE"/>
    <description>
    epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the algorithm ID, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2524/">CVE-2016-2524</cve>
	<bugzilla href="https://bugzilla.suse.com/968565">SUSE bug 968565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2525</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2525" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2525" ref_url="https://www.suse.com/security/cve/CVE-2016-2525" source="SUSE CVE"/>
    <description>
    epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2525/">CVE-2016-2525</cve>
	<bugzilla href="https://bugzilla.suse.com/968565">SUSE bug 968565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2526</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2526" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2526" ref_url="https://www.suse.com/security/cve/CVE-2016-2526" source="SUSE CVE"/>
    <description>
    epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data type, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2526/">CVE-2016-2526</cve>
	<bugzilla href="https://bugzilla.suse.com/968565">SUSE bug 968565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2527</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2527" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2527" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2527" ref_url="https://www.suse.com/security/cve/CVE-2016-2527" source="SUSE CVE"/>
    <description>
    wiretap/nettrace_3gpp_32_423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\0' character is present at the end of certain strings, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2527/">CVE-2016-2527</cve>
	<bugzilla href="https://bugzilla.suse.com/968565">SUSE bug 968565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2528</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2528" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2528" ref_url="https://www.suse.com/security/cve/CVE-2016-2528" source="SUSE CVE"/>
    <description>
    The dissect_nhdr_extopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate length values, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2528/">CVE-2016-2528</cve>
	<bugzilla href="https://bugzilla.suse.com/968565">SUSE bug 968565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2529</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2529" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2529" ref_url="https://www.suse.com/security/cve/CVE-2016-2529" source="SUSE CVE"/>
    <description>
    The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the "OBJECT PROTOCOL" substring, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2529/">CVE-2016-2529</cve>
	<bugzilla href="https://bugzilla.suse.com/968565">SUSE bug 968565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2530</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2530" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2530" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2530" ref_url="https://www.suse.com/security/cve/CVE-2016-2530" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0660-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0661-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html" source="SUSE-SU"/>
    <description>
    The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 mishandles the case of an unrecognized TLV type, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet, a different vulnerability than CVE-2016-2531.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2530/">CVE-2016-2530</cve>
	<bugzilla href="https://bugzilla.suse.com/968565">SUSE bug 968565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2531</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2531" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2531" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2531" ref_url="https://www.suse.com/security/cve/CVE-2016-2531" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0660-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0661-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that triggers a 0xff tag value, a different vulnerability than CVE-2016-2530.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2531/">CVE-2016-2531</cve>
	<bugzilla href="https://bugzilla.suse.com/968565">SUSE bug 968565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2532</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2532" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2532" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2532" ref_url="https://www.suse.com/security/cve/CVE-2016-2532" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0660-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0661-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html" source="SUSE-SU"/>
    <description>
    The dissect_llrp_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2532/">CVE-2016-2532</cve>
	<bugzilla href="https://bugzilla.suse.com/968565">SUSE bug 968565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2538</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2538" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2538" ref_url="https://www.suse.com/security/cve/CVE-2016-2538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0914-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the (1) rndis_query_response, (2) rndis_set_response, or (3) usb_net_handle_dataout function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2538/">CVE-2016-2538</cve>
	<bugzilla href="https://bugzilla.suse.com/967969">SUSE bug 967969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968004">SUSE bug 968004</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2548</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2548" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2548" ref_url="https://www.suse.com/security/cve/CVE-2016-2548" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service (system crash) via a crafted ioctl call, related to the (1) snd_timer_close and (2) _snd_timer_stop functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-13"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2548/">CVE-2016-2548</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968012">SUSE bug 968012</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2549</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2549" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2549" ref_url="https://www.suse.com/security/cve/CVE-2016-2549" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local users to cause a denial of service (deadlock) via a crafted ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-13"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2549/">CVE-2016-2549</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968013">SUSE bug 968013</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2569</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2569" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2569" ref_url="https://www.suse.com/security/cve/CVE-2016-2569" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html" source="SUSE-SU"/>
    <description>
    Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2569/">CVE-2016-2569</cve>
	<bugzilla href="https://bugzilla.suse.com/968392">SUSE bug 968392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968393">SUSE bug 968393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334168" comment="squid is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2570</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2570" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2570" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2570" ref_url="https://www.suse.com/security/cve/CVE-2016-2570" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html" source="SUSE-SU"/>
    <description>
    The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a crafted XML document, related to esi/CustomParser.cc and esi/CustomParser.h.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2570/">CVE-2016-2570</cve>
	<bugzilla href="https://bugzilla.suse.com/968392">SUSE bug 968392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968393">SUSE bug 968393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334168" comment="squid is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2571</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2571" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2571" ref_url="https://www.suse.com/security/cve/CVE-2016-2571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html" source="SUSE-SU"/>
    <description>
    http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2571/">CVE-2016-2571</cve>
	<bugzilla href="https://bugzilla.suse.com/968394">SUSE bug 968394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968395">SUSE bug 968395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334168" comment="squid is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2572</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2572" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2572" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2572" ref_url="https://www.suse.com/security/cve/CVE-2016-2572" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html" source="SUSE-SU"/>
    <description>
    http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2572/">CVE-2016-2572</cve>
	<bugzilla href="https://bugzilla.suse.com/968394">SUSE bug 968394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968395">SUSE bug 968395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334168" comment="squid is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2775</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2775" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2775" ref_url="https://www.suse.com/security/cve/CVE-2016-2775" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0999-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002797.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00022.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-08-11"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2775/">CVE-2016-2775</cve>
	<bugzilla href="https://bugzilla.suse.com/989528">SUSE bug 989528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333968" comment="bind is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335113" comment="bind-chrootenv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335115" comment="bind-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335114" comment="bind-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335112" comment="bind-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634659" comment="libbind9-1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634660" comment="libdns1605 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634661" comment="libirs-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634662" comment="libirs1601 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634663" comment="libisc1606 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634664" comment="libisccc1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634665" comment="libisccfg1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634666" comment="libns1604 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634667" comment="python3-bind is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2776</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2776" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2776" ref_url="https://www.suse.com/security/cve/CVE-2016-2776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2399-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2401-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="TID7018100" ref_url="https://www.suse.com/support/kb/doc/?id=7018100" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00030.html" source="SUSE-SU"/>
    <description>
    buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2776/">CVE-2016-2776</cve>
	<bugzilla href="https://bugzilla.suse.com/1000362">SUSE bug 1000362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1001595">SUSE bug 1001595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1001597">SUSE bug 1001597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007829">SUSE bug 1007829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2779</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2779" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2779" ref_url="https://www.suse.com/security/cve/CVE-2016-2779" source="SUSE CVE"/>
    <description>
    runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2779/">CVE-2016-2779</cve>
	<bugzilla href="https://bugzilla.suse.com/1000998">SUSE bug 1000998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018892">SUSE bug 1018892</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/946429">SUSE bug 946429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968375">SUSE bug 968375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968674">SUSE bug 968674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968675">SUSE bug 968675</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488452" comment="uuidd-2.33.1-2.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481268" comment="libblkid-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481269" comment="libblkid-devel-static-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481270" comment="libblkid1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481271" comment="libblkid1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481272" comment="libfdisk-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481273" comment="libfdisk1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481274" comment="libmount-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481275" comment="libmount1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481276" comment="libmount1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481277" comment="libsmartcols-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481278" comment="libsmartcols1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481279" comment="libuuid-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481280" comment="libuuid-devel-static-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481281" comment="libuuid1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481282" comment="libuuid1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481283" comment="util-linux-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481284" comment="util-linux-lang-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481285" comment="util-linux-systemd-2.33.1-2.14 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2782</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2782" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2782" ref_url="https://www.suse.com/security/cve/CVE-2016-2782" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a (1) bulk-in or (2) interrupt-in endpoint.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2782/">CVE-2016-2782</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/961512">SUSE bug 961512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968670">SUSE bug 968670</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2790</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2790" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2790" ref_url="https://www.suse.com/security/cve/CVE-2016-2790" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2790/">CVE-2016-2790</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2791</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2791" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2791" ref_url="https://www.suse.com/security/cve/CVE-2016-2791" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2791/">CVE-2016-2791</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2792</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2792" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2792" ref_url="https://www.suse.com/security/cve/CVE-2016-2792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2800.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2792/">CVE-2016-2792</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2793</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2793" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2793" ref_url="https://www.suse.com/security/cve/CVE-2016-2793" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2793/">CVE-2016-2793</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2794</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2794" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2794" ref_url="https://www.suse.com/security/cve/CVE-2016-2794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2794/">CVE-2016-2794</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2795</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2795" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2795" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2795" ref_url="https://www.suse.com/security/cve/CVE-2016-2795" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2795/">CVE-2016-2795</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2796</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2796" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2796" ref_url="https://www.suse.com/security/cve/CVE-2016-2796" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2796/">CVE-2016-2796</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2797</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2797" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2797" ref_url="https://www.suse.com/security/cve/CVE-2016-2797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2801.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2797/">CVE-2016-2797</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2798</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2798" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2798" ref_url="https://www.suse.com/security/cve/CVE-2016-2798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2798/">CVE-2016-2798</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2799</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2799" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2799" ref_url="https://www.suse.com/security/cve/CVE-2016-2799" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2799/">CVE-2016-2799</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2800</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2800" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2800" ref_url="https://www.suse.com/security/cve/CVE-2016-2800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2792.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2800/">CVE-2016-2800</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2801</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2801" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2801" ref_url="https://www.suse.com/security/cve/CVE-2016-2801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2797.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2801/">CVE-2016-2801</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2802</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2802" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2802" ref_url="https://www.suse.com/security/cve/CVE-2016-2802" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0731-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0733-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0876-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2802/">CVE-2016-2802</cve>
	<bugzilla href="https://bugzilla.suse.com/969894">SUSE bug 969894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2804</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2804" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2804" ref_url="https://www.suse.com/security/cve/CVE-2016-2804" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2804/">CVE-2016-2804</cve>
	<bugzilla href="https://bugzilla.suse.com/977373">SUSE bug 977373</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2806</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2806" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2806" ref_url="https://www.suse.com/security/cve/CVE-2016-2806" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2806/">CVE-2016-2806</cve>
	<bugzilla href="https://bugzilla.suse.com/977375">SUSE bug 977375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2807</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2807" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2807" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2807" ref_url="https://www.suse.com/security/cve/CVE-2016-2807" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1352-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2807/">CVE-2016-2807</cve>
	<bugzilla href="https://bugzilla.suse.com/977333">SUSE bug 977333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977376">SUSE bug 977376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2808</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2808" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2808" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2808" ref_url="https://www.suse.com/security/cve/CVE-2016-2808" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1352-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    The watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code or cause a denial of service (generation-count overflow, out-of-bounds HashMap write access, and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2808/">CVE-2016-2808</cve>
	<bugzilla href="https://bugzilla.suse.com/977333">SUSE bug 977333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977386">SUSE bug 977386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2809</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2809" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2809" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2809" ref_url="https://www.suse.com/security/cve/CVE-2016-2809" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2809/">CVE-2016-2809</cve>
	<bugzilla href="https://bugzilla.suse.com/977333">SUSE bug 977333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977377">SUSE bug 977377</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2810</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2810" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2810" ref_url="https://www.suse.com/security/cve/CVE-2016-2810" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2810/">CVE-2016-2810</cve>
	<bugzilla href="https://bugzilla.suse.com/977333">SUSE bug 977333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977378">SUSE bug 977378</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2811</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2811" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2811" ref_url="https://www.suse.com/security/cve/CVE-2016-2811" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2811/">CVE-2016-2811</cve>
	<bugzilla href="https://bugzilla.suse.com/977379">SUSE bug 977379</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2812</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2812" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2812" ref_url="https://www.suse.com/security/cve/CVE-2016-2812" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2812/">CVE-2016-2812</cve>
	<bugzilla href="https://bugzilla.suse.com/977379">SUSE bug 977379</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2813</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2813" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2813" ref_url="https://www.suse.com/security/cve/CVE-2016-2813" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment, and possibly discover PIN values, via a crafted web site, a similar issue to CVE-2016-1780.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2813/">CVE-2016-2813</cve>
	<bugzilla href="https://bugzilla.suse.com/977333">SUSE bug 977333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977380">SUSE bug 977380</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2814</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2814" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2814" ref_url="https://www.suse.com/security/cve/CVE-2016-2814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1352-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code via crafted CENC offsets that lead to mismanagement of the sizes table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2814/">CVE-2016-2814</cve>
	<bugzilla href="https://bugzilla.suse.com/977333">SUSE bug 977333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977381">SUSE bug 977381</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2815</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2815" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2815" ref_url="https://www.suse.com/security/cve/CVE-2016-2815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2815/">CVE-2016-2815</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983638">SUSE bug 983638</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2816</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2816" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2816" ref_url="https://www.suse.com/security/cve/CVE-2016-2816" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via the multipart/x-mixed-replace content type.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2816/">CVE-2016-2816</cve>
	<bugzilla href="https://bugzilla.suse.com/977382">SUSE bug 977382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2817</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2817" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2817" ref_url="https://www.suse.com/security/cve/CVE-2016-2817" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-2817/">CVE-2016-2817</cve>
	<bugzilla href="https://bugzilla.suse.com/977384">SUSE bug 977384</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2818</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2818" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2818" ref_url="https://www.suse.com/security/cve/CVE-2016-2818" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1767-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2818/">CVE-2016-2818</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983638">SUSE bug 983638</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2819</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2819" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2819" ref_url="https://www.suse.com/security/cve/CVE-2016-2819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2819/">CVE-2016-2819</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983655">SUSE bug 983655</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2820</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2820" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2820" ref_url="https://www.suse.com/security/cve/CVE-2016-2820" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1211-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html" source="SUSE-SU"/>
    <description>
    The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-2820/">CVE-2016-2820</cve>
	<bugzilla href="https://bugzilla.suse.com/977388">SUSE bug 977388</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2821</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2821" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2821" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2821" ref_url="https://www.suse.com/security/cve/CVE-2016-2821" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2821/">CVE-2016-2821</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983653">SUSE bug 983653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2822</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2822" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2822" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2822" ref_url="https://www.suse.com/security/cve/CVE-2016-2822" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2822/">CVE-2016-2822</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983652">SUSE bug 983652</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2824</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2824" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2824" ref_url="https://www.suse.com/security/cve/CVE-2016-2824" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact by triggering use of a WebGL shader that writes to an array.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2824/">CVE-2016-2824</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983651">SUSE bug 983651</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2825</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2825" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2825" ref_url="https://www.suse.com/security/cve/CVE-2016-2825" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2825/">CVE-2016-2825</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983649">SUSE bug 983649</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2827</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2827" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2827" ref_url="https://www.suse.com/security/cve/CVE-2016-2827" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    The mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a Content Security Policy (CSP) referrer directive with zero values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2827/">CVE-2016-2827</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2828</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2828" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2828" ref_url="https://www.suse.com/security/cve/CVE-2016-2828" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers texture access after destruction of the texture's recycle pool.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2828/">CVE-2016-2828</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983646">SUSE bug 983646</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2829</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2829" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2829" ref_url="https://www.suse.com/security/cve/CVE-2016-2829" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a crafted web site that rapidly triggers permission requests, as demonstrated by the microphone permission or the geolocation permission.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2829/">CVE-2016-2829</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983644">SUSE bug 983644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2830</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2830" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2830" ref_url="https://www.suse.com/security/cve/CVE-2016-2830" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2830/">CVE-2016-2830</cve>
	<bugzilla href="https://bugzilla.suse.com/983922">SUSE bug 983922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2831</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2831" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2831" ref_url="https://www.suse.com/security/cve/CVE-2016-2831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves the fullscreen and pointerlock settings, which allows remote attackers to cause a denial of service (UI outage), or conduct clickjacking or spoofing attacks, via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-2831/">CVE-2016-2831</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983632">SUSE bug 983632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983643">SUSE bug 983643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2832</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2832" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2832" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2832" ref_url="https://www.suse.com/security/cve/CVE-2016-2832" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets (CSS) pseudo-classes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2832/">CVE-2016-2832</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983632">SUSE bug 983632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2833</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2833" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2833" ref_url="https://www.suse.com/security/cve/CVE-2016-2833" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted applet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-2833/">CVE-2016-2833</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983640">SUSE bug 983640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2834</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2834" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2834" ref_url="https://www.suse.com/security/cve/CVE-2016-2834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1552-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1557-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2834/">CVE-2016-2834</cve>
	<bugzilla href="https://bugzilla.suse.com/983549">SUSE bug 983549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983639">SUSE bug 983639</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2835</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2835" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2835" ref_url="https://www.suse.com/security/cve/CVE-2016-2835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2835/">CVE-2016-2835</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2836</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2836" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2836" ref_url="https://www.suse.com/security/cve/CVE-2016-2836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown, and other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2836/">CVE-2016-2836</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2837</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2837" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2837" ref_url="https://www.suse.com/security/cve/CVE-2016-2837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-2837/">CVE-2016-2837</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2838</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2838" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2838" ref_url="https://www.suse.com/security/cve/CVE-2016-2838" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2838/">CVE-2016-2838</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2839</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2839" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2839" ref_url="https://www.suse.com/security/cve/CVE-2016-2839" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service (application crash) via a crafted video.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2839/">CVE-2016-2839</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2841</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2841" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2841" ref_url="https://www.suse.com/security/cve/CVE-2016-2841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0955-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
    <description>
    The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via crafted values for the PSTART and PSTOP registers, involving ring buffer control.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2841/">CVE-2016-2841</cve>
	<bugzilla href="https://bugzilla.suse.com/969350">SUSE bug 969350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969351">SUSE bug 969351</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2851</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-2851" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2851" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-2851" ref_url="https://www.suse.com/security/cve/CVE-2016-2851" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001918.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001919.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0708-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00030.html" source="SUSE-SU"/>
    <description>
    Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2851/">CVE-2016-2851</cve>
	<bugzilla href="https://bugzilla.suse.com/969785">SUSE bug 969785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488928" comment="libotr-devel-4.1.1-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488929" comment="libotr5-4.1.1-2.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3044</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3044" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3044" ref_url="https://www.suse.com/security/cve/CVE-2016-3044" source="SUSE CVE"/>
    <description>
    The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.3-65.10 and 3.1 before 3.1.0.2 allows guest OS users to cause a denial of service (host OS infinite loop and hang) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3044/">CVE-2016-3044</cve>
	<bugzilla href="https://bugzilla.suse.com/1013013">SUSE bug 1013013</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3065</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3065" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3065" ref_url="https://www.suse.com/security/cve/CVE-2016-3065" source="SUSE CVE"/>
    <description>
    The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-18"/>
	<updated date="2023-09-07"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3065/">CVE-2016-3065</cve>
	<bugzilla href="https://bugzilla.suse.com/978456">SUSE bug 978456</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334083" comment="postgresql is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654611" comment="postgresql-test is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334083" comment="postgresql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336201" comment="postgresql-contrib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335927" comment="postgresql-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336202" comment="postgresql-docs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336203" comment="postgresql-plperl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336204" comment="postgresql-plpython is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336205" comment="postgresql-pltcl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336206" comment="postgresql-server is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336207" comment="postgresql-server-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3070</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3070" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3070" ref_url="https://www.suse.com/security/cve/CVE-2016-3070" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by triggering a certain page move.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3070/">CVE-2016-3070</cve>
	<bugzilla href="https://bugzilla.suse.com/979215">SUSE bug 979215</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3075</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3075" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3075" ref_url="https://www.suse.com/security/cve/CVE-2016-3075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002230.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1779-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a long name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3075/">CVE-2016-3075</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/973164">SUSE bug 973164</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3092</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3092" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3092" ref_url="https://www.suse.com/security/cve/CVE-2016-3092" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1660-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0758-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014070.html" source="SUSE-SU"/>
		<reference ref_id="TID7010166" ref_url="https://www.suse.com/support/kb/doc/?id=7010166" source="SUSE-SU"/>
		<reference ref_id="TID7021433" ref_url="https://www.suse.com/support/kb/doc/?id=7021433" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2252-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00025.html" source="SUSE-SU"/>
    <description>
    The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-05-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3092/">CVE-2016-3092</cve>
	<bugzilla href="https://bugzilla.suse.com/1068865">SUSE bug 1068865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986359">SUSE bug 986359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988489">SUSE bug 988489</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009743820" comment="jakarta-commons-fileupload-1.1.1-150000.4.8.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3099</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3099" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3099" ref_url="https://www.suse.com/security/cve/CVE-2016-3099" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002267.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2396-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002292.html" source="SUSE-SU"/>
    <description>
    mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3099/">CVE-2016-3099</cve>
	<bugzilla href="https://bugzilla.suse.com/973996">SUSE bug 973996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488115" comment="apache2-mod_nss-1.0.17-1.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3115</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3115" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3115" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3115" ref_url="https://www.suse.com/security/cve/CVE-2016-3115" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002103.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002338.html" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="TID7022313" ref_url="https://www.suse.com/support/kb/doc/?id=7022313" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1455-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00132.html" source="SUSE-SU"/>
    <description>
    Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-3115/">CVE-2016-3115</cve>
	<bugzilla href="https://bugzilla.suse.com/1005738">SUSE bug 1005738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059233">SUSE bug 1059233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970632">SUSE bug 970632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992296">SUSE bug 992296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996040">SUSE bug 996040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3119</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3119" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3119" ref_url="https://www.suse.com/security/cve/CVE-2016-3119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0994-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/001993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/002016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1072-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00055.html" source="SUSE-SU"/>
    <description>
    The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3119/">CVE-2016-3119</cve>
	<bugzilla href="https://bugzilla.suse.com/971942">SUSE bug 971942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3120</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3120" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3120" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3120" ref_url="https://www.suse.com/security/cve/CVE-2016-3120" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2136-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002222.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00035.html" source="SUSE-SU"/>
    <description>
    The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3120/">CVE-2016-3120</cve>
	<bugzilla href="https://bugzilla.suse.com/991088">SUSE bug 991088</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3134</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3134" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3134" ref_url="https://www.suse.com/security/cve/CVE-2016-3134" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2000-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2001-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2006-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2009-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3134/">CVE-2016-3134</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052256">SUSE bug 1052256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/971126">SUSE bug 971126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/971793">SUSE bug 971793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986362">SUSE bug 986362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986365">SUSE bug 986365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986377">SUSE bug 986377</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3139</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3139" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3139" ref_url="https://www.suse.com/security/cve/CVE-2016-3139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2649-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-13"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3139/">CVE-2016-3139</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970909">SUSE bug 970909</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3186</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3186" ref_url="https://www.suse.com/security/cve/CVE-2016-3186" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1103-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3186/">CVE-2016-3186</cve>
	<bugzilla href="https://bugzilla.suse.com/973340">SUSE bug 973340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983268">SUSE bug 983268</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3189</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3189" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3189" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3189" ref_url="https://www.suse.com/security/cve/CVE-2016-3189" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1206-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005739.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1435-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00056.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3189/">CVE-2016-3189</cve>
	<bugzilla href="https://bugzilla.suse.com/985657">SUSE bug 985657</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334488" comment="bzip2 is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334488" comment="bzip2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335397" comment="libbz2-1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335396" comment="libbz2-1-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335399" comment="libbz2-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009490057" comment="bzip2-1.0.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490058" comment="libbz2-1-1.0.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490059" comment="libbz2-1-32bit-1.0.6-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490060" comment="libbz2-devel-1.0.6-5.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3191</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3191" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3191" ref_url="https://www.suse.com/security/cve/CVE-2016-3191" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002488.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2035-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2805-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3099-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00076.html" source="SUSE-SU"/>
    <description>
    The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-3191/">CVE-2016-3191</cve>
	<bugzilla href="https://bugzilla.suse.com/971741">SUSE bug 971741</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335823" comment="libpcre1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335826" comment="libpcre1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335824" comment="libpcre16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335825" comment="libpcrecpp0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335827" comment="libpcrecpp0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335828" comment="libpcreposix0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335829" comment="pcre-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335831" comment="pcre-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654596" comment="libpcre2-16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654597" comment="libpcre2-32-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654598" comment="libpcre2-8-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654599" comment="libpcre2-posix2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654600" comment="pcre2-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480659" comment="libpcre16-0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480665" comment="libpcre2-16-0-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480666" comment="libpcre2-32-0-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480667" comment="libpcre2-8-0-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480660" comment="libpcrecpp0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480661" comment="libpcrecpp0-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480662" comment="libpcreposix0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480663" comment="pcre-devel-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480664" comment="pcre-tools-8.41-4.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482350" comment="libpcre2-posix2-10.31-1.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482351" comment="pcre2-devel-10.31-1.14 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3422</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3422" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3422" ref_url="https://www.suse.com/security/cve/CVE-2016-3422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-3422/">CVE-2016-3422</cve>
	<bugzilla href="https://bugzilla.suse.com/976340">SUSE bug 976340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3425</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3425" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3425" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3425" ref_url="https://www.suse.com/security/cve/CVE-2016-3425" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-3425/">CVE-2016-3425</cve>
	<bugzilla href="https://bugzilla.suse.com/976340">SUSE bug 976340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3426</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3426" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3426" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3426" ref_url="https://www.suse.com/security/cve/CVE-2016-3426" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality via vectors related to JCE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-3426/">CVE-2016-3426</cve>
	<bugzilla href="https://bugzilla.suse.com/976340">SUSE bug 976340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3427</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3427" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3427" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3427" ref_url="https://www.suse.com/security/cve/CVE-2016-3427" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3427/">CVE-2016-3427</cve>
	<bugzilla href="https://bugzilla.suse.com/1011805">SUSE bug 1011805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976340">SUSE bug 976340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3443</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3443" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3443" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3443" ref_url="https://www.suse.com/security/cve/CVE-2016-3443" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.  NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3443/">CVE-2016-3443</cve>
	<bugzilla href="https://bugzilla.suse.com/976340">SUSE bug 976340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3449</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3449" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3449" ref_url="https://www.suse.com/security/cve/CVE-2016-3449" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1379-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3449/">CVE-2016-3449</cve>
	<bugzilla href="https://bugzilla.suse.com/976340">SUSE bug 976340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979252">SUSE bug 979252</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3458</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3458" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3458" ref_url="https://www.suse.com/security/cve/CVE-2016-3458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-3458/">CVE-2016-3458</cve>
	<bugzilla href="https://bugzilla.suse.com/989732">SUSE bug 989732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3477</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3477" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3477" ref_url="https://www.suse.com/security/cve/CVE-2016-3477" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2278-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3477/">CVE-2016-3477</cve>
	<bugzilla href="https://bugzilla.suse.com/989913">SUSE bug 989913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991616">SUSE bug 991616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3485</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3485" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3485" ref_url="https://www.suse.com/security/cve/CVE-2016-3485" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2286-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2347-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002303.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2726-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows local users to affect integrity via vectors related to Networking.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-3485/">CVE-2016-3485</cve>
	<bugzilla href="https://bugzilla.suse.com/1009280">SUSE bug 1009280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989734">SUSE bug 989734</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3492</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3492" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3492" ref_url="https://www.suse.com/security/cve/CVE-2016-3492" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3492/">CVE-2016-3492</cve>
	<bugzilla href="https://bugzilla.suse.com/1005555">SUSE bug 1005555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3498</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3498" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3498" ref_url="https://www.suse.com/security/cve/CVE-2016-3498" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-3498/">CVE-2016-3498</cve>
	<bugzilla href="https://bugzilla.suse.com/989729">SUSE bug 989729</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3500</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3500" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3500" ref_url="https://www.suse.com/security/cve/CVE-2016-3500" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-3500/">CVE-2016-3500</cve>
	<bugzilla href="https://bugzilla.suse.com/989730">SUSE bug 989730</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3503</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3503" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3503" ref_url="https://www.suse.com/security/cve/CVE-2016-3503" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3503/">CVE-2016-3503</cve>
	<bugzilla href="https://bugzilla.suse.com/989728">SUSE bug 989728</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3508</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3508" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3508" ref_url="https://www.suse.com/security/cve/CVE-2016-3508" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-3508/">CVE-2016-3508</cve>
	<bugzilla href="https://bugzilla.suse.com/989731">SUSE bug 989731</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3511</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3511" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3511" ref_url="https://www.suse.com/security/cve/CVE-2016-3511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2286-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2347-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2726-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3511/">CVE-2016-3511</cve>
	<bugzilla href="https://bugzilla.suse.com/1009280">SUSE bug 1009280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989727">SUSE bug 989727</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3521</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3521" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3521" ref_url="https://www.suse.com/security/cve/CVE-2016-3521" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2278-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3521/">CVE-2016-3521</cve>
	<bugzilla href="https://bugzilla.suse.com/989919">SUSE bug 989919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991616">SUSE bug 991616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163550" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3550</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3550" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3550" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3550" ref_url="https://www.suse.com/security/cve/CVE-2016-3550" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-3550/">CVE-2016-3550</cve>
	<bugzilla href="https://bugzilla.suse.com/989733">SUSE bug 989733</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3552</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3552" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3552" ref_url="https://www.suse.com/security/cve/CVE-2016-3552" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3552/">CVE-2016-3552</cve>
	<bugzilla href="https://bugzilla.suse.com/989726">SUSE bug 989726</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3587</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3587" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3587" ref_url="https://www.suse.com/security/cve/CVE-2016-3587" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2210-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3587/">CVE-2016-3587</cve>
	<bugzilla href="https://bugzilla.suse.com/989721">SUSE bug 989721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998845">SUSE bug 998845</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3598</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3598" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3598" ref_url="https://www.suse.com/security/cve/CVE-2016-3598" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2286-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2347-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2726-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3598/">CVE-2016-3598</cve>
	<bugzilla href="https://bugzilla.suse.com/1009280">SUSE bug 1009280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989723">SUSE bug 989723</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163606" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3606</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3606" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3606" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3606" ref_url="https://www.suse.com/security/cve/CVE-2016-3606" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3606/">CVE-2016-3606</cve>
	<bugzilla href="https://bugzilla.suse.com/989722">SUSE bug 989722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3610</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3610" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3610" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3610" ref_url="https://www.suse.com/security/cve/CVE-2016-3610" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2052-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3610/">CVE-2016-3610</cve>
	<bugzilla href="https://bugzilla.suse.com/989725">SUSE bug 989725</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3615</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3615" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3615" ref_url="https://www.suse.com/security/cve/CVE-2016-3615" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2278-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3615/">CVE-2016-3615</cve>
	<bugzilla href="https://bugzilla.suse.com/989922">SUSE bug 989922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991616">SUSE bug 991616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3616</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3616" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3616" ref_url="https://www.suse.com/security/cve/CVE-2016-3616" source="SUSE CVE"/>
    <description>
    The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3616/">CVE-2016-3616</cve>
	<bugzilla href="https://bugzilla.suse.com/1160884">SUSE bug 1160884</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335964" comment="libjpeg8-32bit is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335963" comment="libjpeg8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335968" comment="libjpeg8-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335965" comment="libturbojpeg0 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3622</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3622" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3622" ref_url="https://www.suse.com/security/cve/CVE-2016-3622" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2526-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2544-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3622/">CVE-2016-3622</cve>
	<bugzilla href="https://bugzilla.suse.com/974449">SUSE bug 974449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3623</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3623" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3623" ref_url="https://www.suse.com/security/cve/CVE-2016-3623" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2275-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00048.html" source="SUSE-SU"/>
    <description>
    The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3623/">CVE-2016-3623</cve>
	<bugzilla href="https://bugzilla.suse.com/974617">SUSE bug 974617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974618">SUSE bug 974618</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3627</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3627" ref_url="https://www.suse.com/security/cve/CVE-2016-3627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1205-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1298-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1446-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
    <description>
    The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3627/">CVE-2016-3627</cve>
	<bugzilla href="https://bugzilla.suse.com/1026099">SUSE bug 1026099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1026101">SUSE bug 1026101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/972335">SUSE bug 972335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975947">SUSE bug 975947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3658</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3658" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3658" ref_url="https://www.suse.com/security/cve/CVE-2016-3658" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving the ma variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3658/">CVE-2016-3658</cve>
	<bugzilla href="https://bugzilla.suse.com/974840">SUSE bug 974840</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3697</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3697" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3697" ref_url="https://www.suse.com/security/cve/CVE-2016-3697" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/002030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00111.html" source="SUSE-SU"/>
    <description>
    libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3697/">CVE-2016-3697</cve>
	<bugzilla href="https://bugzilla.suse.com/976777">SUSE bug 976777</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3698</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3698" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3698" ref_url="https://www.suse.com/security/cve/CVE-2016-3698" source="SUSE CVE"/>
    <description>
    libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3698/">CVE-2016-3698</cve>
	<bugzilla href="https://bugzilla.suse.com/979645">SUSE bug 979645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486473" comment="libndp-devel-1.6-1.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486474" comment="libndp0-1.6-1.26 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3705</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3705" ref_url="https://www.suse.com/security/cve/CVE-2016-3705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1446-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a crafted XML document containing a large number of nested entity references.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3705/">CVE-2016-3705</cve>
	<bugzilla href="https://bugzilla.suse.com/1017497">SUSE bug 1017497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975947">SUSE bug 975947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3706</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3706" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3706" ref_url="https://www.suse.com/security/cve/CVE-2016-3706" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002230.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1779-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of service (crash) via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4458.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3706/">CVE-2016-3706</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980483">SUSE bug 980483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/997423">SUSE bug 997423</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3709</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3709" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3709" ref_url="https://www.suse.com/security/cve/CVE-2016-3709" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:2711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2833-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/025986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2834-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/025987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2836-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/025989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2838-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/025990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2839-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/025991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2840-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/025992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1261-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1262-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014663.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:3096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016302.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013935.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013936.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013937.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013938.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013939.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013942.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013943.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013946.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013948.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1130-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1134-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012663.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012813.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:3665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016187.html" source="SUSE-SU"/>
    <description>
    Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-05"/>
	<updated date="2023-09-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3709/">CVE-2016-3709</cve>
	<bugzilla href="https://bugzilla.suse.com/1201978">SUSE bug 1201978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669296" comment="ruby2.5-rubygem-nokogiri is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009718902" comment="libxml2-2-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718903" comment="libxml2-2-32bit-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718904" comment="libxml2-devel-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718905" comment="libxml2-tools-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718906" comment="python2-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718907" comment="python3-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009718928" comment="libxml2-2-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718903" comment="libxml2-2-32bit-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718929" comment="libxml2-devel-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718930" comment="libxml2-tools-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718867" comment="python2-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718931" comment="python3-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009718942" comment="libxml2-2-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718903" comment="libxml2-2-32bit-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718943" comment="libxml2-devel-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718944" comment="libxml2-tools-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718945" comment="python2-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718946" comment="python3-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009718979" comment="libxml2-2-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718903" comment="libxml2-2-32bit-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718980" comment="libxml2-devel-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718981" comment="libxml2-tools-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718982" comment="python2-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009718983" comment="python3-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3710</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3710" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3710" ref_url="https://www.suse.com/security/cve/CVE-2016-3710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3710/">CVE-2016-3710</cve>
	<bugzilla href="https://bugzilla.suse.com/978158">SUSE bug 978158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978164">SUSE bug 978164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978167">SUSE bug 978167</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3712</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3712" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3712" ref_url="https://www.suse.com/security/cve/CVE-2016-3712" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3712/">CVE-2016-3712</cve>
	<bugzilla href="https://bugzilla.suse.com/978160">SUSE bug 978160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978164">SUSE bug 978164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978167">SUSE bug 978167</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3714</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3714" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3714" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3714" ref_url="https://www.suse.com/security/cve/CVE-2016-3714" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="TID7017647" ref_url="https://www.suse.com/support/kb/doc/?id=7017647" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html" source="SUSE-SU"/>
    <description>
    The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3714/">CVE-2016-3714</cve>
	<bugzilla href="https://bugzilla.suse.com/1000484">SUSE bug 1000484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057163">SUSE bug 1057163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105592">SUSE bug 1105592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978061">SUSE bug 978061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980401">SUSE bug 980401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982178">SUSE bug 982178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487780" comment="perl-PerlMagick-7.0.7.34-3.54.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486560" comment="ImageMagick-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486561" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486562" comment="ImageMagick-devel-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486563" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486564" comment="libMagick++-devel-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486565" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486566" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.54.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3715</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3715" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3715" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3715" ref_url="https://www.suse.com/security/cve/CVE-2016-3715" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html" source="SUSE-SU"/>
    <description>
    The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3715/">CVE-2016-3715</cve>
	<bugzilla href="https://bugzilla.suse.com/1000484">SUSE bug 1000484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057163">SUSE bug 1057163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105592">SUSE bug 1105592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978061">SUSE bug 978061</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487780" comment="perl-PerlMagick-7.0.7.34-3.54.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486560" comment="ImageMagick-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486561" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486562" comment="ImageMagick-devel-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486563" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486564" comment="libMagick++-devel-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486565" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486566" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.54.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163716" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3716</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3716" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3716" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3716" ref_url="https://www.suse.com/security/cve/CVE-2016-3716" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html" source="SUSE-SU"/>
    <description>
    The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-3716/">CVE-2016-3716</cve>
	<bugzilla href="https://bugzilla.suse.com/1000484">SUSE bug 1000484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057163">SUSE bug 1057163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105592">SUSE bug 1105592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978061">SUSE bug 978061</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487780" comment="perl-PerlMagick-7.0.7.34-3.54.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486560" comment="ImageMagick-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486561" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486562" comment="ImageMagick-devel-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486563" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486564" comment="libMagick++-devel-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486565" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486566" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.54.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3717</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3717" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3717" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3717" ref_url="https://www.suse.com/security/cve/CVE-2016-3717" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html" source="SUSE-SU"/>
    <description>
    The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-3717/">CVE-2016-3717</cve>
	<bugzilla href="https://bugzilla.suse.com/1000484">SUSE bug 1000484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057163">SUSE bug 1057163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105592">SUSE bug 1105592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978061">SUSE bug 978061</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487780" comment="perl-PerlMagick-7.0.7.34-3.54.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486560" comment="ImageMagick-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486561" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486562" comment="ImageMagick-devel-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486563" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486564" comment="libMagick++-devel-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486565" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486566" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.54.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3718</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3718" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3718" ref_url="https://www.suse.com/security/cve/CVE-2016-3718" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1260-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-May/002052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html" source="SUSE-SU"/>
    <description>
    The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3718/">CVE-2016-3718</cve>
	<bugzilla href="https://bugzilla.suse.com/1000484">SUSE bug 1000484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057163">SUSE bug 1057163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105592">SUSE bug 1105592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978061">SUSE bug 978061</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487780" comment="perl-PerlMagick-7.0.7.34-3.54.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486560" comment="ImageMagick-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486561" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486562" comment="ImageMagick-devel-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486563" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486564" comment="libMagick++-devel-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486565" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486566" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.54.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3841</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3841" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3841" ref_url="https://www.suse.com/security/cve/CVE-2016-3841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3069-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
    <description>
    The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3841/">CVE-2016-3841</cve>
	<bugzilla href="https://bugzilla.suse.com/1052256">SUSE bug 1052256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992566">SUSE bug 992566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992569">SUSE bug 992569</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3945</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3945" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3945" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3945" ref_url="https://www.suse.com/security/cve/CVE-2016-3945" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2275-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00048.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3945/">CVE-2016-3945</cve>
	<bugzilla href="https://bugzilla.suse.com/974614">SUSE bug 974614</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3951</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3951" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3951" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3951" ref_url="https://www.suse.com/security/cve/CVE-2016-3951" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1764-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3951/">CVE-2016-3951</cve>
	<bugzilla href="https://bugzilla.suse.com/974418">SUSE bug 974418</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3977</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3977" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3977" ref_url="https://www.suse.com/security/cve/CVE-2016-3977" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1357-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010965.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:967-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/002024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-April/002025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:1970-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014565.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1111-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1118-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-04/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1219-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00019.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3977/">CVE-2016-3977</cve>
	<bugzilla href="https://bugzilla.suse.com/974847">SUSE bug 974847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339000" comment="giflib is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480262" comment="giflib-devel-5.1.4-2.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480263" comment="libgif7-5.1.4-2.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009679712" comment="giflib-devel-5.2.1-150000.4.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009679713" comment="libgif7-5.2.1-150000.4.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009754758" comment="giflib-devel-5.2.1-150000.4.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009754759" comment="libgif7-5.2.1-150000.4.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009754764" comment="giflib-devel-5.2.1-150000.4.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009754765" comment="libgif7-5.2.1-150000.4.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3990</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3990" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3990" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3990" ref_url="https://www.suse.com/security/cve/CVE-2016-3990" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2275-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00048.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3990/">CVE-2016-3990</cve>
	<bugzilla href="https://bugzilla.suse.com/975069">SUSE bug 975069</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3991</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-3991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3991" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-3991" ref_url="https://www.suse.com/security/cve/CVE-2016-3991" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002326.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2275-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00048.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image with zero tiles.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3991/">CVE-2016-3991</cve>
	<bugzilla href="https://bugzilla.suse.com/975070">SUSE bug 975070</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335906" comment="libtiff-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335904" comment="libtiff5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335905" comment="libtiff5-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4002</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4002" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4002" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4002" ref_url="https://www.suse.com/security/cve/CVE-2016-4002" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4002/">CVE-2016-4002</cve>
	<bugzilla href="https://bugzilla.suse.com/975136">SUSE bug 975136</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975138">SUSE bug 975138</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4008</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4008" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4008" ref_url="https://www.suse.com/security/cve/CVE-2016-4008" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1674-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00097.html" source="SUSE-SU"/>
    <description>
    The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4008/">CVE-2016-4008</cve>
	<bugzilla href="https://bugzilla.suse.com/982779">SUSE bug 982779</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481514" comment="libtasn1-4.13-4.2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481515" comment="libtasn1-6-4.13-4.2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481516" comment="libtasn1-6-32bit-4.13-4.2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481517" comment="libtasn1-devel-4.13-4.2.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4020</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4020" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4020" ref_url="https://www.suse.com/security/cve/CVE-2016-4020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4020/">CVE-2016-4020</cve>
	<bugzilla href="https://bugzilla.suse.com/975700">SUSE bug 975700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/975907">SUSE bug 975907</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4049</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4049" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4049" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4049" ref_url="https://www.suse.com/security/cve/CVE-2016-4049" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1483-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1313-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00062.html" source="SUSE-SU"/>
    <description>
    The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4049/">CVE-2016-4049</cve>
	<bugzilla href="https://bugzilla.suse.com/977012">SUSE bug 977012</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488182" comment="libfpm_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488183" comment="libospf0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488184" comment="libospfapiclient0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488185" comment="libquagga_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488186" comment="libzebra1-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488187" comment="quagga-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488188" comment="quagga-devel-1.1.1-2.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4052</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4052" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4052" ref_url="https://www.suse.com/security/cve/CVE-2016-4052" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes (ESI) responses.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4052/">CVE-2016-4052</cve>
	<bugzilla href="https://bugzilla.suse.com/976556">SUSE bug 976556</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333991" comment="squid is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4053</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4053" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4053" ref_url="https://www.suse.com/security/cve/CVE-2016-4053" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html" source="SUSE-SU"/>
    <description>
    Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4053/">CVE-2016-4053</cve>
	<bugzilla href="https://bugzilla.suse.com/976556">SUSE bug 976556</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333991" comment="squid is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4054</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4054" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4054" ref_url="https://www.suse.com/security/cve/CVE-2016-4054" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4054/">CVE-2016-4054</cve>
	<bugzilla href="https://bugzilla.suse.com/976556">SUSE bug 976556</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333991" comment="squid is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4074</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4074" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4074" ref_url="https://www.suse.com/security/cve/CVE-2016-4074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003382.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2834-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00084.html" source="SUSE-SU"/>
    <description>
    The jv_dump_term function in jq 1.5 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted JSON file. This issue has been fixed in jq 1.6_rc1-r0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4074/">CVE-2016-4074</cve>
	<bugzilla href="https://bugzilla.suse.com/1014176">SUSE bug 1014176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/976992">SUSE bug 976992</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481193" comment="jq-1.5-1.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481194" comment="libjq-devel-1.5-1.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481195" comment="libjq1-1.5-1.27 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4300</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4300" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4300" ref_url="https://www.suse.com/security/cve/CVE-2016-4300" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4300/">CVE-2016-4300</cve>
	<bugzilla href="https://bugzilla.suse.com/985832">SUSE bug 985832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4301</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4301" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4301" ref_url="https://www.suse.com/security/cve/CVE-2016-4301" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4301/">CVE-2016-4301</cve>
	<bugzilla href="https://bugzilla.suse.com/985826">SUSE bug 985826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4324</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4324" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4324" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4324" ref_url="https://www.suse.com/security/cve/CVE-2016-4324" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002316.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2538-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00054.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4324/">CVE-2016-4324</cve>
	<bugzilla href="https://bugzilla.suse.com/987553">SUSE bug 987553</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4425</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4425" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4425" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4425" ref_url="https://www.suse.com/security/cve/CVE-2016-4425" source="SUSE CVE"/>
    <description>
    Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4425/">CVE-2016-4425</cve>
	<bugzilla href="https://bugzilla.suse.com/978163">SUSE bug 978163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009655957" comment="libjansson-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655958" comment="libjansson4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655959" comment="libjansson4-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4429</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4429" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4429" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4429" ref_url="https://www.suse.com/security/cve/CVE-2016-4429" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002230.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1779-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4429/">CVE-2016-4429</cve>
	<bugzilla href="https://bugzilla.suse.com/1081556">SUSE bug 1081556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980854">SUSE bug 980854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4439</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4439" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4439" ref_url="https://www.suse.com/security/cve/CVE-2016-4439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4439/">CVE-2016-4439</cve>
	<bugzilla href="https://bugzilla.suse.com/980711">SUSE bug 980711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980716">SUSE bug 980716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4440</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4440" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4440" ref_url="https://www.suse.com/security/cve/CVE-2016-4440" source="SUSE CVE"/>
    <description>
    arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS, and consequently cause a denial of service (host OS crash) or possibly execute arbitrary code on the host OS, via x2APIC mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4440/">CVE-2016-4440</cve>
	<bugzilla href="https://bugzilla.suse.com/980829">SUSE bug 980829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4441</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4441" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4441" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4441" ref_url="https://www.suse.com/security/cve/CVE-2016-4441" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4441/">CVE-2016-4441</cve>
	<bugzilla href="https://bugzilla.suse.com/980723">SUSE bug 980723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980724">SUSE bug 980724</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4450</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4450" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4450" ref_url="https://www.suse.com/security/cve/CVE-2016-4450" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002566.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0361-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0362-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00008.html" source="SUSE-SU"/>
    <description>
    os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4450/">CVE-2016-4450</cve>
	<bugzilla href="https://bugzilla.suse.com/982484">SUSE bug 982484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982505">SUSE bug 982505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982507">SUSE bug 982507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488403" comment="nginx-1.14.0-4.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488404" comment="nginx-source-1.14.0-4.24 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4453</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4453" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4453" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4453" ref_url="https://www.suse.com/security/cve/CVE-2016-4453" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4453/">CVE-2016-4453</cve>
	<bugzilla href="https://bugzilla.suse.com/982223">SUSE bug 982223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982225">SUSE bug 982225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4454</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4454" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4454" ref_url="https://www.suse.com/security/cve/CVE-2016-4454" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4454/">CVE-2016-4454</cve>
	<bugzilla href="https://bugzilla.suse.com/982222">SUSE bug 982222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982224">SUSE bug 982224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4463</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4463" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4463" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4463" ref_url="https://www.suse.com/security/cve/CVE-2016-4463" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2154-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002228.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004754.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1808-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00013.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4463/">CVE-2016-4463</cve>
	<bugzilla href="https://bugzilla.suse.com/985860">SUSE bug 985860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481575" comment="libxerces-c-3_1-3.1.4-3.3.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481576" comment="libxerces-c-devel-3.1.4-3.3.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4472</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4472" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4472" ref_url="https://www.suse.com/security/cve/CVE-2016-4472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html" source="SUSE-SU"/>
    <description>
    The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4472/">CVE-2016-4472</cve>
	<bugzilla href="https://bugzilla.suse.com/1034050">SUSE bug 1034050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/939077">SUSE bug 939077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980391">SUSE bug 980391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983985">SUSE bug 983985</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4476</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4476" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4476" ref_url="https://www.suse.com/security/cve/CVE-2016-4476" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
    <description>
    hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4476/">CVE-2016-4476</cve>
	<bugzilla href="https://bugzilla.suse.com/978172">SUSE bug 978172</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334146" comment="wpa_supplicant is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481672" comment="wpa_supplicant-2.6-4.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4477</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4477" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4477" ref_url="https://www.suse.com/security/cve/CVE-2016-4477" source="SUSE CVE"/>
    <description>
    wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service (daemon outage), via a crafted (1) SET, (2) SET_CRED, or (3) SET_NETWORK command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4477/">CVE-2016-4477</cve>
	<bugzilla href="https://bugzilla.suse.com/978175">SUSE bug 978175</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334146" comment="wpa_supplicant is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481672" comment="wpa_supplicant-2.6-4.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4480</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4480" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4480" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4480" ref_url="https://www.suse.com/security/cve/CVE-2016-4480" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4480/">CVE-2016-4480</cve>
	<bugzilla href="https://bugzilla.suse.com/1072198">SUSE bug 1072198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072223">SUSE bug 1072223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978288">SUSE bug 978288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978295">SUSE bug 978295</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4482</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4482" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4482" ref_url="https://www.suse.com/security/cve/CVE-2016-4482" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html" source="SUSE-SU"/>
    <description>
    The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4482/">CVE-2016-4482</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978401">SUSE bug 978401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978445">SUSE bug 978445</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4483</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4483" ref_url="https://www.suse.com/security/cve/CVE-2016-4483" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1538-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html" source="SUSE-SU"/>
    <description>
    The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4483/">CVE-2016-4483</cve>
	<bugzilla href="https://bugzilla.suse.com/1026101">SUSE bug 1026101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978395">SUSE bug 978395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4485</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4485" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4485" ref_url="https://www.suse.com/security/cve/CVE-2016-4485" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00007.html" source="SUSE-SU"/>
    <description>
    The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory by reading a message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4485/">CVE-2016-4485</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/978821">SUSE bug 978821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4487</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4487" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4487" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4487" ref_url="https://www.suse.com/security/cve/CVE-2016-4487" source="SUSE CVE"/>
    <description>
    Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4487/">CVE-2016-4487</cve>
	<bugzilla href="https://bugzilla.suse.com/978813">SUSE bug 978813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336299" comment="cpp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334154" comment="gcc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336300" comment="gcc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631671" comment="gcc-PIE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336363" comment="gcc-ada is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336301" comment="gcc-c++ is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336350" comment="gcc-c++-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336357" comment="gcc-fortran is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631672" comment="gcc-fortran-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336304" comment="gcc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336349" comment="gcc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336360" comment="gcc-objc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336305" comment="libstdc++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336351" comment="libstdc++-devel-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4488</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4488" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4488" ref_url="https://www.suse.com/security/cve/CVE-2016-4488" source="SUSE CVE"/>
    <description>
    Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "ktypevec."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4488/">CVE-2016-4488</cve>
	<bugzilla href="https://bugzilla.suse.com/978814">SUSE bug 978814</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336299" comment="cpp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334154" comment="gcc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336300" comment="gcc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631671" comment="gcc-PIE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336363" comment="gcc-ada is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336301" comment="gcc-c++ is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336350" comment="gcc-c++-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336357" comment="gcc-fortran is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631672" comment="gcc-fortran-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336304" comment="gcc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336349" comment="gcc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336360" comment="gcc-objc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336305" comment="libstdc++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336351" comment="libstdc++-devel-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4489</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4489" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4489" ref_url="https://www.suse.com/security/cve/CVE-2016-4489" source="SUSE CVE"/>
    <description>
    Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to the "demangling of virtual tables."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4489/">CVE-2016-4489</cve>
	<bugzilla href="https://bugzilla.suse.com/978815">SUSE bug 978815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336299" comment="cpp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334154" comment="gcc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336300" comment="gcc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631671" comment="gcc-PIE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336363" comment="gcc-ada is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336301" comment="gcc-c++ is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336350" comment="gcc-c++-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336357" comment="gcc-fortran is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631672" comment="gcc-fortran-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336304" comment="gcc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336349" comment="gcc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336360" comment="gcc-objc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336305" comment="libstdc++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336351" comment="libstdc++-devel-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4490</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4490" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4490" ref_url="https://www.suse.com/security/cve/CVE-2016-4490" source="SUSE CVE"/>
    <description>
    Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and int types for lengths.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4490/">CVE-2016-4490</cve>
	<bugzilla href="https://bugzilla.suse.com/978816">SUSE bug 978816</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336299" comment="cpp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334154" comment="gcc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336300" comment="gcc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631671" comment="gcc-PIE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336363" comment="gcc-ada is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336301" comment="gcc-c++ is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336350" comment="gcc-c++-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336357" comment="gcc-fortran is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631672" comment="gcc-fortran-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336304" comment="gcc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336349" comment="gcc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336360" comment="gcc-objc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336305" comment="libstdc++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336351" comment="libstdc++-devel-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4491</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4491" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4491" ref_url="https://www.suse.com/security/cve/CVE-2016-4491" source="SUSE CVE"/>
    <description>
    The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4491/">CVE-2016-4491</cve>
	<bugzilla href="https://bugzilla.suse.com/978817">SUSE bug 978817</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336299" comment="cpp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334154" comment="gcc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336300" comment="gcc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631671" comment="gcc-PIE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336363" comment="gcc-ada is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336301" comment="gcc-c++ is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336350" comment="gcc-c++-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336357" comment="gcc-fortran is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631672" comment="gcc-fortran-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336304" comment="gcc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336349" comment="gcc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336360" comment="gcc-objc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336305" comment="libstdc++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336351" comment="libstdc++-devel-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4492</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4492" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4492" ref_url="https://www.suse.com/security/cve/CVE-2016-4492" source="SUSE CVE"/>
    <description>
    Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4492/">CVE-2016-4492</cve>
	<bugzilla href="https://bugzilla.suse.com/978818">SUSE bug 978818</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336299" comment="cpp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334154" comment="gcc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336300" comment="gcc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631671" comment="gcc-PIE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336363" comment="gcc-ada is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336301" comment="gcc-c++ is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336350" comment="gcc-c++-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336357" comment="gcc-fortran is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631672" comment="gcc-fortran-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336304" comment="gcc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336349" comment="gcc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336360" comment="gcc-objc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336305" comment="libstdc++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336351" comment="libstdc++-devel-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4493</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4493" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4493" ref_url="https://www.suse.com/security/cve/CVE-2016-4493" source="SUSE CVE"/>
    <description>
    The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted binary.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4493/">CVE-2016-4493</cve>
	<bugzilla href="https://bugzilla.suse.com/978819">SUSE bug 978819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336299" comment="cpp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334154" comment="gcc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336300" comment="gcc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631671" comment="gcc-PIE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336363" comment="gcc-ada is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336301" comment="gcc-c++ is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336350" comment="gcc-c++-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336357" comment="gcc-fortran is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631672" comment="gcc-fortran-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336304" comment="gcc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336349" comment="gcc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336360" comment="gcc-objc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336305" comment="libstdc++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336351" comment="libstdc++-devel-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4553</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4553" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4553" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4553" ref_url="https://www.suse.com/security/cve/CVE-2016-4553" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html" source="SUSE-SU"/>
    <description>
    client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-4553/">CVE-2016-4553</cve>
	<bugzilla href="https://bugzilla.suse.com/979009">SUSE bug 979009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990451">SUSE bug 990451</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334168" comment="squid is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4556</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4556" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4556" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4556" ref_url="https://www.suse.com/security/cve/CVE-2016-4556" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4556/">CVE-2016-4556</cve>
	<bugzilla href="https://bugzilla.suse.com/979008">SUSE bug 979008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979011">SUSE bug 979011</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334168" comment="squid is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4562</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4562" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4562" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4562" ref_url="https://www.suse.com/security/cve/CVE-2016-4562" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1784-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1748-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4562/">CVE-2016-4562</cve>
	<bugzilla href="https://bugzilla.suse.com/983292">SUSE bug 983292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983305">SUSE bug 983305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983308">SUSE bug 983308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983309">SUSE bug 983309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4565</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4565" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4565" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4565" ref_url="https://www.suse.com/security/cve/CVE-2016-4565" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2000-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2001-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2006-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2009-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html" source="SUSE-SU"/>
    <description>
    The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4565/">CVE-2016-4565</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979548">SUSE bug 979548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980363">SUSE bug 980363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980883">SUSE bug 980883</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4568</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4568" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4568" ref_url="https://www.suse.com/security/cve/CVE-2016-4568" source="SUSE CVE"/>
    <description>
    drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a crafted number of planes in a VIDIOC_DQBUF ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4568/">CVE-2016-4568</cve>
	<bugzilla href="https://bugzilla.suse.com/979022">SUSE bug 979022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981516">SUSE bug 981516</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4569</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4569" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4569" ref_url="https://www.suse.com/security/cve/CVE-2016-4569" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00007.html" source="SUSE-SU"/>
    <description>
    The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4569/">CVE-2016-4569</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979213">SUSE bug 979213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979879">SUSE bug 979879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4574</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4574" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4574" ref_url="https://www.suse.com/security/cve/CVE-2016-4574" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1370-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-05/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00028.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4574/">CVE-2016-4574</cve>
	<bugzilla href="https://bugzilla.suse.com/1135436">SUSE bug 1135436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979261">SUSE bug 979261</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480596" comment="libksba-devel-1.3.5-2.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480597" comment="libksba8-1.3.5-2.14 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164579" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4579</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4579" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4579" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4579" ref_url="https://www.suse.com/security/cve/CVE-2016-4579" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-June/002099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1525-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00028.html" source="SUSE-SU"/>
    <description>
    Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4579/">CVE-2016-4579</cve>
	<bugzilla href="https://bugzilla.suse.com/1135436">SUSE bug 1135436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979906">SUSE bug 979906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480596" comment="libksba-devel-1.3.5-2.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480597" comment="libksba8-1.3.5-2.14 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4590</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4590" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4590" ref_url="https://www.suse.com/security/cve/CVE-2016-4590" source="SUSE CVE"/>
    <description>
    WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-4590/">CVE-2016-4590</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4591</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4591" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4591" ref_url="https://www.suse.com/security/cve/CVE-2016-4591" source="SUSE CVE"/>
    <description>
    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4591/">CVE-2016-4591</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164606" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4606</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4606" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4606" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4606" ref_url="https://www.suse.com/security/cve/CVE-2016-4606" source="SUSE CVE"/>
    <description>
    Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4606/">CVE-2016-4606</cve>
	<bugzilla href="https://bugzilla.suse.com/1164687">SUSE bug 1164687</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333977" comment="curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335174" comment="libcurl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335173" comment="libcurl4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335172" comment="libcurl4-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4622</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4622" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4622" ref_url="https://www.suse.com/security/cve/CVE-2016-4622" source="SUSE CVE"/>
    <description>
    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4622/">CVE-2016-4622</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4624</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4624" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4624" ref_url="https://www.suse.com/security/cve/CVE-2016-4624" source="SUSE CVE"/>
    <description>
    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4623.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4624/">CVE-2016-4624</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4658</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4658" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4658" ref_url="https://www.suse.com/security/cve/CVE-2016-4658" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002619.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2711-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2730-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0446-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00055.html" source="SUSE-SU"/>
    <description>
    xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4658/">CVE-2016-4658</cve>
	<bugzilla href="https://bugzilla.suse.com/1005544">SUSE bug 1005544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014873">SUSE bug 1014873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069433">SUSE bug 1069433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078813">SUSE bug 1078813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4692</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4692" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4692" ref_url="https://www.suse.com/security/cve/CVE-2016-4692" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4692/">CVE-2016-4692</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4738</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4738" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4738" ref_url="https://www.suse.com/security/cve/CVE-2016-4738" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1390-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00079.html" source="SUSE-SU"/>
    <description>
    libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4738/">CVE-2016-4738</cve>
	<bugzilla href="https://bugzilla.suse.com/1005591">SUSE bug 1005591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123130">SUSE bug 1123130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480825" comment="libxslt-devel-1.1.32-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480826" comment="libxslt-tools-1.1.32-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480827" comment="libxslt1-1.1.32-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4743</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4743" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4743" ref_url="https://www.suse.com/security/cve/CVE-2016-4743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4743/">CVE-2016-4743</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4794</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4794" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4794" ref_url="https://www.suse.com/security/cve/CVE-2016-4794" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1798-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00014.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4794/">CVE-2016-4794</cve>
	<bugzilla href="https://bugzilla.suse.com/980265">SUSE bug 980265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981517">SUSE bug 981517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4796</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4796" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4796" ref_url="https://www.suse.com/security/cve/CVE-2016-4796" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4796/">CVE-2016-4796</cve>
	<bugzilla href="https://bugzilla.suse.com/980504">SUSE bug 980504</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335369" comment="libopenjp2-7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334004" comment="openjpeg2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338711" comment="openjpeg2-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335369" comment="libopenjp2-7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726871" comment="libopenjp2-7-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334004" comment="openjpeg2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338711" comment="openjpeg2-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4797</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4797" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4797" ref_url="https://www.suse.com/security/cve/CVE-2016-4797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010666.html" source="SUSE-SU"/>
    <description>
    Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-4797/">CVE-2016-4797</cve>
	<bugzilla href="https://bugzilla.suse.com/979911">SUSE bug 979911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980504">SUSE bug 980504</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335369" comment="libopenjp2-7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334004" comment="openjpeg2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338711" comment="openjpeg2-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335369" comment="libopenjp2-7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726871" comment="libopenjp2-7-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334004" comment="openjpeg2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338711" comment="openjpeg2-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4804</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4804" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4804" ref_url="https://www.suse.com/security/cve/CVE-2016-4804" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2145-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002225.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1461-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2233-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00014.html" source="SUSE-SU"/>
    <description>
    The read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) read_fat function or an out-of-bounds heap read in (2) get_fat function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4804/">CVE-2016-4804</cve>
	<bugzilla href="https://bugzilla.suse.com/980364">SUSE bug 980364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980377">SUSE bug 980377</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655181" comment="dosfstools is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4809</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4809" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4809" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4809" ref_url="https://www.suse.com/security/cve/CVE-2016-4809" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1679-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00031.html" source="SUSE-SU"/>
    <description>
    The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4809/">CVE-2016-4809</cve>
	<bugzilla href="https://bugzilla.suse.com/984990">SUSE bug 984990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4856</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4856" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4856" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4856" ref_url="https://www.suse.com/security/cve/CVE-2016-4856" source="SUSE CVE"/>
    <description>
    Cross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3.x prior to 6.3.5 allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-4856/">CVE-2016-4856</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4857</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4857" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4857" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4857" ref_url="https://www.suse.com/security/cve/CVE-2016-4857" source="SUSE CVE"/>
    <description>
    Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.11 and Splunk Light prior to 6.4.2 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-4857/">CVE-2016-4857</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4858</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4858" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4858" ref_url="https://www.suse.com/security/cve/CVE-2016-4858" source="SUSE CVE"/>
    <description>
    Cross-site scripting vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light prior to 6.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-4858/">CVE-2016-4858</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4859</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4859" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4859" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4859" ref_url="https://www.suse.com/security/cve/CVE-2016-4859" source="SUSE CVE"/>
    <description>
    Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light prior to 6.4.3 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-4859/">CVE-2016-4859</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4912</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4912" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4912" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4912" ref_url="https://www.suse.com/security/cve/CVE-2016-4912" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003598.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2712-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00005.html" source="SUSE-SU"/>
    <description>
    The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a large number of crafted packets, which triggers a memory allocation failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4912/">CVE-2016-4912</cve>
	<bugzilla href="https://bugzilla.suse.com/1074356">SUSE bug 1074356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980722">SUSE bug 980722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488405" comment="openslp-server-2.0.0-6.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334285" comment="openslp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337334" comment="openslp-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337335" comment="openslp-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337332" comment="openslp-server is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481604" comment="openslp-2.0.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481605" comment="openslp-32bit-2.0.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481606" comment="openslp-devel-2.0.0-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4952</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4952" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4952" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4952" ref_url="https://www.suse.com/security/cve/CVE-2016-4952" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1560-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1750-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4952/">CVE-2016-4952</cve>
	<bugzilla href="https://bugzilla.suse.com/981266">SUSE bug 981266</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981276">SUSE bug 981276</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4953</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4953" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4953" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4953" ref_url="https://www.suse.com/security/cve/CVE-2016-4953" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1583-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html" source="SUSE-SU"/>
    <description>
    ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4953/">CVE-2016-4953</cve>
	<bugzilla href="https://bugzilla.suse.com/962784">SUSE bug 962784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977459">SUSE bug 977459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982056">SUSE bug 982056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982065">SUSE bug 982065</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4954</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4954" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4954" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4954" ref_url="https://www.suse.com/security/cve/CVE-2016-4954" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1583-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html" source="SUSE-SU"/>
    <description>
    The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4954/">CVE-2016-4954</cve>
	<bugzilla href="https://bugzilla.suse.com/982056">SUSE bug 982056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982066">SUSE bug 982066</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4955</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4955" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4955" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4955" ref_url="https://www.suse.com/security/cve/CVE-2016-4955" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1583-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html" source="SUSE-SU"/>
    <description>
    ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4955/">CVE-2016-4955</cve>
	<bugzilla href="https://bugzilla.suse.com/982056">SUSE bug 982056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982067">SUSE bug 982067</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4956</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4956" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4956" ref_url="https://www.suse.com/security/cve/CVE-2016-4956" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1583-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html" source="SUSE-SU"/>
    <description>
    ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-4956/">CVE-2016-4956</cve>
	<bugzilla href="https://bugzilla.suse.com/977461">SUSE bug 977461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982056">SUSE bug 982056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982068">SUSE bug 982068</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4957</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4957" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4957" ref_url="https://www.suse.com/security/cve/CVE-2016-4957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1563-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1583-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html" source="SUSE-SU"/>
    <description>
    ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4957/">CVE-2016-4957</cve>
	<bugzilla href="https://bugzilla.suse.com/977459">SUSE bug 977459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982056">SUSE bug 982056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982064">SUSE bug 982064</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4964</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4964" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4964" ref_url="https://www.suse.com/security/cve/CVE-2016-4964" source="SUSE CVE"/>
    <description>
    The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop, and CPU consumption or QEMU process crash) via vectors involving s-&gt;state.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4964/">CVE-2016-4964</cve>
	<bugzilla href="https://bugzilla.suse.com/981399">SUSE bug 981399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/981401">SUSE bug 981401</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4971</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4971" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4971" ref_url="https://www.suse.com/security/cve/CVE-2016-4971" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2226-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002286.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2027-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2277-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00041.html" source="SUSE-SU"/>
    <description>
    GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4971/">CVE-2016-4971</cve>
	<bugzilla href="https://bugzilla.suse.com/1023231">SUSE bug 1023231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984060">SUSE bug 984060</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481671" comment="wget-1.19.5-3.6.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4979</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4979" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4979" ref_url="https://www.suse.com/security/cve/CVE-2016-4979" source="SUSE CVE"/>
    <description>
    The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HTTP/2 request authorization, which allows remote attackers to bypass intended access restrictions by leveraging the ability to send multiple requests over a single connection and aborting a renegotiation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-4979/">CVE-2016-4979</cve>
	<bugzilla href="https://bugzilla.suse.com/987365">SUSE bug 987365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4992</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4992" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4992" ref_url="https://www.suse.com/security/cve/CVE-2016-4992" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:3362-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00076.html" source="SUSE-SU"/>
    <description>
    389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to infer the existence of RDN component objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4992/">CVE-2016-4992</cve>
	<bugzilla href="https://bugzilla.suse.com/991201">SUSE bug 991201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/997256">SUSE bug 997256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488105" comment="389-ds-1.4.0.3-2.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488106" comment="389-ds-devel-1.4.0.3-2.39 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4994</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-4994" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4994" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-4994" ref_url="https://www.suse.com/security/cve/CVE-2016-4994" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002178.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1727-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4994/">CVE-2016-4994</cve>
	<bugzilla href="https://bugzilla.suse.com/986021">SUSE bug 986021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488900" comment="gimp-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488901" comment="gimp-devel-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488902" comment="gimp-lang-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488903" comment="gimp-plugins-python-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488904" comment="libgimp-2_0-0-2.8.22-3.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488905" comment="libgimpui-2_0-0-2.8.22-3.42 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5010</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5010" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5010" ref_url="https://www.suse.com/security/cve/CVE-2016-5010" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002209.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2072-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2148-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00100.html" source="SUSE-SU"/>
    <description>
    coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5010/">CVE-2016-5010</cve>
	<bugzilla href="https://bugzilla.suse.com/991444">SUSE bug 991444</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5011</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5011" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5011" ref_url="https://www.suse.com/security/cve/CVE-2016-5011" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002396.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2840-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00078.html" source="SUSE-SU"/>
    <description>
    The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5011/">CVE-2016-5011</cve>
	<bugzilla href="https://bugzilla.suse.com/988361">SUSE bug 988361</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488452" comment="uuidd-2.33.1-2.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481268" comment="libblkid-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481269" comment="libblkid-devel-static-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481270" comment="libblkid1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481271" comment="libblkid1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481272" comment="libfdisk-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481273" comment="libfdisk1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481274" comment="libmount-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481275" comment="libmount1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481276" comment="libmount1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481277" comment="libsmartcols-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481278" comment="libsmartcols1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481279" comment="libuuid-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481280" comment="libuuid-devel-static-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481281" comment="libuuid1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481282" comment="libuuid1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481283" comment="util-linux-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481284" comment="util-linux-lang-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481285" comment="util-linux-systemd-2.33.1-2.14 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5104</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5104" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5104" ref_url="https://www.suse.com/security/cve/CVE-2016-5104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1639-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1526-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00029.html" source="SUSE-SU"/>
    <description>
    The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5104/">CVE-2016-5104</cve>
	<bugzilla href="https://bugzilla.suse.com/982014">SUSE bug 982014</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488915" comment="imobiledevice-tools-1.2.0+git20170122.45fda81-1.44 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482796" comment="libimobiledevice-devel-1.2.0+git20170122.45fda81-1.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482797" comment="libimobiledevice6-1.2.0+git20170122.45fda81-1.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486509" comment="libusbmuxd-devel-1.0.10-3.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486510" comment="libusbmuxd4-1.0.10-3.23 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5105</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5105" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5105" ref_url="https://www.suse.com/security/cve/CVE-2016-5105" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5105/">CVE-2016-5105</cve>
	<bugzilla href="https://bugzilla.suse.com/982017">SUSE bug 982017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982024">SUSE bug 982024</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5106</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5106" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5106" ref_url="https://www.suse.com/security/cve/CVE-2016-5106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5106/">CVE-2016-5106</cve>
	<bugzilla href="https://bugzilla.suse.com/982018">SUSE bug 982018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982025">SUSE bug 982025</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5107</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5107" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5107" ref_url="https://www.suse.com/security/cve/CVE-2016-5107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5107/">CVE-2016-5107</cve>
	<bugzilla href="https://bugzilla.suse.com/982019">SUSE bug 982019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982026">SUSE bug 982026</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5116</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5116" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5116" ref_url="https://www.suse.com/security/cve/CVE-2016-5116" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002271.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1516-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html" source="SUSE-SU"/>
    <description>
    gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5116/">CVE-2016-5116</cve>
	<bugzilla href="https://bugzilla.suse.com/982176">SUSE bug 982176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5118</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5118" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5118" ref_url="https://www.suse.com/security/cve/CVE-2016-5118" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1610-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1614-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1522-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1653-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3060-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00028.html" source="SUSE-SU"/>
    <description>
    The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5118/">CVE-2016-5118</cve>
	<bugzilla href="https://bugzilla.suse.com/1000484">SUSE bug 1000484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982178">SUSE bug 982178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487780" comment="perl-PerlMagick-7.0.7.34-3.54.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486560" comment="ImageMagick-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486561" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486562" comment="ImageMagick-devel-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486563" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486564" comment="libMagick++-devel-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486565" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.54.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486566" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.54.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5126</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5126" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5126" ref_url="https://www.suse.com/security/cve/CVE-2016-5126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5126/">CVE-2016-5126</cve>
	<bugzilla href="https://bugzilla.suse.com/982285">SUSE bug 982285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982286">SUSE bug 982286</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5139</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5139" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5139" ref_url="https://www.suse.com/security/cve/CVE-2016-5139" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-5139/">CVE-2016-5139</cve>
	<bugzilla href="https://bugzilla.suse.com/992305">SUSE bug 992305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992311">SUSE bug 992311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992325">SUSE bug 992325</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5152</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5152" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5152" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5152" ref_url="https://www.suse.com/security/cve/CVE-2016-5152" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5152/">CVE-2016-5152</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5158</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5158" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5158" ref_url="https://www.suse.com/security/cve/CVE-2016-5158" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5158/">CVE-2016-5158</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5159</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5159" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5159" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5159" ref_url="https://www.suse.com/security/cve/CVE-2016-5159" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5159/">CVE-2016-5159</cve>
	<bugzilla href="https://bugzilla.suse.com/996648">SUSE bug 996648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5180</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5180" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5180" ref_url="https://www.suse.com/security/cve/CVE-2016-5180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002418.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002529.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002530.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2752-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0082-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00055.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5180/">CVE-2016-5180</cve>
	<bugzilla href="https://bugzilla.suse.com/1007728">SUSE bug 1007728</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480113" comment="c-ares-devel-1.14.0-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480114" comment="libcares2-1.14.0-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5238</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5238" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5238" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5238" ref_url="https://www.suse.com/security/cve/CVE-2016-5238" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5238/">CVE-2016-5238</cve>
	<bugzilla href="https://bugzilla.suse.com/982959">SUSE bug 982959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982960">SUSE bug 982960</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5244</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5244" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5244" ref_url="https://www.suse.com/security/cve/CVE-2016-5244" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1672-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1641-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html" source="SUSE-SU"/>
    <description>
    The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5244/">CVE-2016-5244</cve>
	<bugzilla href="https://bugzilla.suse.com/983213">SUSE bug 983213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986225">SUSE bug 986225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5250</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5250" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5250" ref_url="https://www.suse.com/security/cve/CVE-2016-5250" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0, Firefox ESR &lt; 45.4 and Thunderbird &lt; 45.4 allow remote attackers to obtain sensitive information about the previously retrieved page via Resource Timing API calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5250/">CVE-2016-5250</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5251</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5251" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5251" ref_url="https://www.suse.com/security/cve/CVE-2016-5251" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted characters in the media type of a data: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5251/">CVE-2016-5251</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5252</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5252" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5252" ref_url="https://www.suse.com/security/cve/CVE-2016-5252" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5252/">CVE-2016-5252</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5253</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5253" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5253" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5253" ref_url="https://www.suse.com/security/cve/CVE-2016-5253" source="SUSE CVE"/>
    <description>
    The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5253/">CVE-2016-5253</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5254</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5254" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5254" ref_url="https://www.suse.com/security/cve/CVE-2016-5254" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by leveraging keyboard access to use the Alt key during selection of top-level menu items.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5254/">CVE-2016-5254</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5255</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5255" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5255" ref_url="https://www.suse.com/security/cve/CVE-2016-5255" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before 48.0 allows remote attackers to execute arbitrary code via crafted JavaScript that is mishandled during incremental garbage collection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5255/">CVE-2016-5255</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5256</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5256" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5256" ref_url="https://www.suse.com/security/cve/CVE-2016-5256" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5256/">CVE-2016-5256</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165257" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5257</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5257" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5257" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5257" ref_url="https://www.suse.com/security/cve/CVE-2016-5257" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird &lt; 45.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5257/">CVE-2016-5257</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5258</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5258" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5258" ref_url="https://www.suse.com/security/cve/CVE-2016-5258" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5258/">CVE-2016-5258</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5259</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5259" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5259" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5259" ref_url="https://www.suse.com/security/cve/CVE-2016-5259" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5259/">CVE-2016-5259</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165260" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5260</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5260" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5260" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5260" ref_url="https://www.suse.com/security/cve/CVE-2016-5260" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow attackers to discover cleartext passwords by reading a session restoration file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5260/">CVE-2016-5260</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5261</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5261" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5261" ref_url="https://www.suse.com/security/cve/CVE-2016-5261" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox before 48.0 and Firefox ESR &lt; 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets that trigger incorrect buffer-resize operations during buffering.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5261/">CVE-2016-5261</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5262</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5262" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5262" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5262" ref_url="https://www.suse.com/security/cve/CVE-2016-5262" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5262/">CVE-2016-5262</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5263</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5263" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5263" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5263" ref_url="https://www.suse.com/security/cve/CVE-2016-5263" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages "type confusion."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5263/">CVE-2016-5263</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165264" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5264</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5264" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5264" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5264" ref_url="https://www.suse.com/security/cve/CVE-2016-5264" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG element that is mishandled during effect application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5264/">CVE-2016-5264</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5265</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5265" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5265" ref_url="https://www.suse.com/security/cve/CVE-2016-5265" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same local directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5265/">CVE-2016-5265</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5266</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5266" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5266" ref_url="https://www.suse.com/security/cve/CVE-2016-5266" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5266/">CVE-2016-5266</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5267</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5267" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5267" ref_url="https://www.suse.com/security/cve/CVE-2016-5267" source="SUSE CVE"/>
    <description>
    Mozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left-to-right characters in conjunction with a right-to-left character set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5267/">CVE-2016-5267</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5268</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5268" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5268" ref_url="https://www.suse.com/security/cve/CVE-2016-5268" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 48.0 does not properly set the LINKABLE and URI_SAFE_FOR_UNTRUSTED_CONTENT flags of about: URLs that are used for error pages, which makes it easier for remote attackers to conduct spoofing attacks via a crafted URL, as demonstrated by misleading text after an about:neterror?d= substring.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5268/">CVE-2016-5268</cve>
	<bugzilla href="https://bugzilla.suse.com/991809">SUSE bug 991809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5270</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5270" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5270" ref_url="https://www.suse.com/security/cve/CVE-2016-5270" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to cause a denial of service (boolean out-of-bounds write) or possibly have unspecified other impact via Unicode characters that are mishandled during text conversion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5270/">CVE-2016-5270</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5271</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5271" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5271" ref_url="https://www.suse.com/security/cve/CVE-2016-5271" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via text runs in conjunction with a "display: contents" Cascading Style Sheets (CSS) property.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5271/">CVE-2016-5271</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5272</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5272" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5272" ref_url="https://www.suse.com/security/cve/CVE-2016-5272" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    The nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 does not properly perform a cast of an unspecified variable during handling of INPUT elements, which allows remote attackers to execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5272/">CVE-2016-5272</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5273</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5273" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5273" ref_url="https://www.suse.com/security/cve/CVE-2016-5273" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility implementation in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5273/">CVE-2016-5273</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5274</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5274" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5274" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5274" ref_url="https://www.suse.com/security/cve/CVE-2016-5274" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between restyling and the Web Animations model implementation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5274/">CVE-2016-5274</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5275</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5275" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5275" ref_url="https://www.suse.com/security/cve/CVE-2016-5275" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5275/">CVE-2016-5275</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165276" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5276</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5276" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5276" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5276" ref_url="https://www.suse.com/security/cve/CVE-2016-5276" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an aria-owns attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5276/">CVE-2016-5276</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5277</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5277" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5277" ref_url="https://www.suse.com/security/cve/CVE-2016-5277" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging improper interaction between timeline destruction and the Web Animations model implementation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5277/">CVE-2016-5277</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5278</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5278" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5278" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5278" ref_url="https://www.suse.com/security/cve/CVE-2016-5278" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5278/">CVE-2016-5278</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165279" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5279</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5279" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5279" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5279" ref_url="https://www.suse.com/security/cve/CVE-2016-5279" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5279/">CVE-2016-5279</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165280" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5280</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5280" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5280" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5280" ref_url="https://www.suse.com/security/cve/CVE-2016-5280" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to execute arbitrary code via bidirectional text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5280/">CVE-2016-5280</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165281" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5281</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5281" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5281" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5281" ref_url="https://www.suse.com/security/cve/CVE-2016-5281" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between JavaScript code and an SVG document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5281/">CVE-2016-5281</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5282</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5282" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5282" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5282" ref_url="https://www.suse.com/security/cve/CVE-2016-5282" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5282/">CVE-2016-5282</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5283</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5283" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5283" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5283" ref_url="https://www.suse.com/security/cve/CVE-2016-5283" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier in the SRC attribute of an IFRAME element, leading to insufficient restrictions on link-color information after a document is resized.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5283/">CVE-2016-5283</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5284</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5284" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5284" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5284" ref_url="https://www.suse.com/security/cve/CVE-2016-5284" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird &lt; 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5284/">CVE-2016-5284</cve>
	<bugzilla href="https://bugzilla.suse.com/999701">SUSE bug 999701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5287</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5287" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5287" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5287" ref_url="https://www.suse.com/security/cve/CVE-2016-5287" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2639-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2735-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00015.html" source="SUSE-SU"/>
    <description>
    A potentially exploitable use-after-free crash during actor destruction with service workers. This issue does not affect releases earlier than Firefox 49. This vulnerability affects Firefox &lt; 49.0.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5287/">CVE-2016-5287</cve>
	<bugzilla href="https://bugzilla.suse.com/1006475">SUSE bug 1006475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5288</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5288" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5288" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5288" ref_url="https://www.suse.com/security/cve/CVE-2016-5288" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2639-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2735-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00015.html" source="SUSE-SU"/>
    <description>
    Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox &lt; 49.0.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5288/">CVE-2016-5288</cve>
	<bugzilla href="https://bugzilla.suse.com/1006476">SUSE bug 1006476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5289</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5289" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5289" ref_url="https://www.suse.com/security/cve/CVE-2016-5289" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 49. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5289/">CVE-2016-5289</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010426">SUSE bug 1010426</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5290</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5290" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5290" ref_url="https://www.suse.com/security/cve/CVE-2016-5290" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5290/">CVE-2016-5290</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010427">SUSE bug 1010427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5291</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5291" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5291" ref_url="https://www.suse.com/security/cve/CVE-2016-5291" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html" source="SUSE-SU"/>
    <description>
    A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5291/">CVE-2016-5291</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010410">SUSE bug 1010410</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5292</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5292" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5292" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5292" ref_url="https://www.suse.com/security/cve/CVE-2016-5292" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5292/">CVE-2016-5292</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010399">SUSE bug 1010399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5293</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5293" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5293" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5293" ref_url="https://www.suse.com/security/cve/CVE-2016-5293" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitrary local file. This vulnerability requires local system access. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox ESR &lt; 45.5 and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5293/">CVE-2016-5293</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010400">SUSE bug 1010400</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5294</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5294" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5294" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5294" ref_url="https://www.suse.com/security/cve/CVE-2016-5294" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. This vulnerability requires local system access. Note: this issue only affects Windows operating systems. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5294/">CVE-2016-5294</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010396">SUSE bug 1010396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5295</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5295" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5295" ref_url="https://www.suse.com/security/cve/CVE-2016-5295" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater to run malicious local files. This vulnerability requires local system access and is a variant of MFSA2013-44. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5295/">CVE-2016-5295</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010411">SUSE bug 1010411</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5296</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5296" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5296" ref_url="https://www.suse.com/security/cve/CVE-2016-5296" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html" source="SUSE-SU"/>
    <description>
    A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5296/">CVE-2016-5296</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010395">SUSE bug 1010395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5297</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5297" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5297" ref_url="https://www.suse.com/security/cve/CVE-2016-5297" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html" source="SUSE-SU"/>
    <description>
    An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5297/">CVE-2016-5297</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010401">SUSE bug 1010401</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5298</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5298" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5298" ref_url="https://www.suse.com/security/cve/CVE-2016-5298" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    A mechanism where disruption of the loading of a new web page can cause the previous page's favicon and SSL indicator to not be reset when the new page is loaded. Note: this issue only affects Firefox for Android. Desktop Firefox is unaffected. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5298/">CVE-2016-5298</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010412">SUSE bug 1010412</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165299" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5299</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5299" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5299" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5299" ref_url="https://www.suse.com/security/cve/CVE-2016-5299" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for Firefox only. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5299/">CVE-2016-5299</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010413">SUSE bug 1010413</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5300</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5300" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5300" ref_url="https://www.suse.com/security/cve/CVE-2016-5300" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0483-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00071.html" source="SUSE-SU"/>
    <description>
    The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5300/">CVE-2016-5300</cve>
	<bugzilla href="https://bugzilla.suse.com/983216">SUSE bug 983216</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5314</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5314" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5314" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5314" ref_url="https://www.suse.com/security/cve/CVE-2016-5314" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1889-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5314/">CVE-2016-5314</cve>
	<bugzilla href="https://bugzilla.suse.com/984831">SUSE bug 984831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987351">SUSE bug 987351</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5316</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5316" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5316" ref_url="https://www.suse.com/security/cve/CVE-2016-5316" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1889-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
    <description>
    Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5316/">CVE-2016-5316</cve>
	<bugzilla href="https://bugzilla.suse.com/984837">SUSE bug 984837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5317</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5317" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5317" ref_url="https://www.suse.com/security/cve/CVE-2016-5317" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1889-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5317/">CVE-2016-5317</cve>
	<bugzilla href="https://bugzilla.suse.com/984842">SUSE bug 984842</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5318</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5318" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5318" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5318" ref_url="https://www.suse.com/security/cve/CVE-2016-5318" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0073-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5318/">CVE-2016-5318</cve>
	<bugzilla href="https://bugzilla.suse.com/1007276">SUSE bug 1007276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017690">SUSE bug 1017690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1040322">SUSE bug 1040322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960341">SUSE bug 960341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974621">SUSE bug 974621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983436">SUSE bug 983436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165320" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5320</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5320" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5320" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5320" ref_url="https://www.suse.com/security/cve/CVE-2016-5320" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1889-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-5314.  Reason: This candidate is a reservation duplicate of CVE-2016-5314.  Notes: All CVE users should reference CVE-2016-5314 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-5320/">CVE-2016-5320</cve>
	<bugzilla href="https://bugzilla.suse.com/1007284">SUSE bug 1007284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984808">SUSE bug 984808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987351">SUSE bug 987351</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5321</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5321" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5321" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5321" ref_url="https://www.suse.com/security/cve/CVE-2016-5321" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5321/">CVE-2016-5321</cve>
	<bugzilla href="https://bugzilla.suse.com/984813">SUSE bug 984813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5323</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5323" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5323" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5323" ref_url="https://www.suse.com/security/cve/CVE-2016-5323" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5323/">CVE-2016-5323</cve>
	<bugzilla href="https://bugzilla.suse.com/984815">SUSE bug 984815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5337</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5337" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5337" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5337" ref_url="https://www.suse.com/security/cve/CVE-2016-5337" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5337/">CVE-2016-5337</cve>
	<bugzilla href="https://bugzilla.suse.com/983961">SUSE bug 983961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983973">SUSE bug 983973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5338</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5338" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5338" ref_url="https://www.suse.com/security/cve/CVE-2016-5338" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5338/">CVE-2016-5338</cve>
	<bugzilla href="https://bugzilla.suse.com/983982">SUSE bug 983982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983984">SUSE bug 983984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5350</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5350" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5350" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5350" ref_url="https://www.suse.com/security/cve/CVE-2016-5350" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5350/">CVE-2016-5350</cve>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5351</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5351" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5351" ref_url="https://www.suse.com/security/cve/CVE-2016-5351" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html" source="SUSE-SU"/>
    <description>
    epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5351/">CVE-2016-5351</cve>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5352</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5352" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5352" ref_url="https://www.suse.com/security/cve/CVE-2016-5352" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
    <description>
    epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5352/">CVE-2016-5352</cve>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5353</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5353" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5353" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5353" ref_url="https://www.suse.com/security/cve/CVE-2016-5353" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5353/">CVE-2016-5353</cve>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5354</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5354" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5354" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5354" ref_url="https://www.suse.com/security/cve/CVE-2016-5354" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html" source="SUSE-SU"/>
    <description>
    The USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5354/">CVE-2016-5354</cve>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5355</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5355" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5355" ref_url="https://www.suse.com/security/cve/CVE-2016-5355" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html" source="SUSE-SU"/>
    <description>
    wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5355/">CVE-2016-5355</cve>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5356</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5356" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5356" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5356" ref_url="https://www.suse.com/security/cve/CVE-2016-5356" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html" source="SUSE-SU"/>
    <description>
    wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5356/">CVE-2016-5356</cve>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165357" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5357</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5357" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5357" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5357" ref_url="https://www.suse.com/security/cve/CVE-2016-5357" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html" source="SUSE-SU"/>
    <description>
    wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5357/">CVE-2016-5357</cve>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5358</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5358" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5358" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5358" ref_url="https://www.suse.com/security/cve/CVE-2016-5358" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5358/">CVE-2016-5358</cve>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5387</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5387" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5387" ref_url="https://www.suse.com/security/cve/CVE-2016-5387" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002158.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002213.html" source="SUSE-SU"/>
		<reference ref_id="TID7017856" ref_url="https://www.suse.com/support/kb/doc/?id=7017856" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2115-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00084.html" source="SUSE-SU"/>
    <description>
    The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.  NOTE: the vendor states "This mitigation has been assigned the identifier CVE-2016-5387"; in other words, this is not a CVE ID for a vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5387/">CVE-2016-5387</cve>
	<bugzilla href="https://bugzilla.suse.com/988484">SUSE bug 988484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988486">SUSE bug 988486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988487">SUSE bug 988487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988488">SUSE bug 988488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988489">SUSE bug 988489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988491">SUSE bug 988491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988492">SUSE bug 988492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989125">SUSE bug 989125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989174">SUSE bug 989174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989684">SUSE bug 989684</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5389</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5389" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5389" ref_url="https://www.suse.com/security/cve/CVE-2016-5389" source="SUSE CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-5696.  Reason: This candidate is a reservation duplicate of CVE-2016-5696.  Notes: All CVE users should reference CVE-2016-5696 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-5389/">CVE-2016-5389</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5403</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5403" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5403" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5403" ref_url="https://www.suse.com/security/cve/CVE-2016-5403" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5403/">CVE-2016-5403</cve>
	<bugzilla href="https://bugzilla.suse.com/990923">SUSE bug 990923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991080">SUSE bug 991080</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5407</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5407" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5407" ref_url="https://www.suse.com/security/cve/CVE-2016-5407" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002477.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2600-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3033-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00047.html" source="SUSE-SU"/>
    <description>
    The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5407/">CVE-2016-5407</cve>
	<bugzilla href="https://bugzilla.suse.com/1003017">SUSE bug 1003017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123148">SUSE bug 1123148</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480440" comment="libXv-devel-1.0.11-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480441" comment="libXv1-1.0.11-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5410</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5410" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5410" ref_url="https://www.suse.com/security/cve/CVE-2016-5410" source="SUSE CVE"/>
    <description>
    firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5410/">CVE-2016-5410</cve>
	<bugzilla href="https://bugzilla.suse.com/992772">SUSE bug 992772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481121" comment="firewall-macros-0.5.5-4.24.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481122" comment="firewalld-0.5.5-4.24.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481123" comment="firewalld-lang-0.5.5-4.24.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481124" comment="python3-firewall-0.5.5-4.24.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486597" comment="firewall-applet-0.5.5-4.24.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486598" comment="firewall-config-0.5.5-4.24.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5412</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5412" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5412" ref_url="https://www.suse.com/security/cve/CVE-2016-5412" source="SUSE CVE"/>
    <description>
    arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host OS infinite loop) by making a H_CEDE hypercall during the existence of a suspended transaction.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5412/">CVE-2016-5412</cve>
	<bugzilla href="https://bugzilla.suse.com/1013013">SUSE bug 1013013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991065">SUSE bug 991065</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5416</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5416" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5416" ref_url="https://www.suse.com/security/cve/CVE-2016-5416" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005817.html" source="SUSE-SU"/>
    <description>
    389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control Instructions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5416/">CVE-2016-5416</cve>
	<bugzilla href="https://bugzilla.suse.com/991201">SUSE bug 991201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009498854" comment="389-ds-1.4.0.26~git0.8a2d3de6f-4.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498855" comment="389-ds-devel-1.4.0.26~git0.8a2d3de6f-4.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5417</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5417" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5417" ref_url="https://www.suse.com/security/cve/CVE-2016-5417" source="SUSE CVE"/>
    <description>
    Memory leak in the __res_vinit function in the IPv6 name server management code in libresolv in GNU C Library (aka glibc or libc6) before 2.24 allows remote attackers to cause a denial of service (memory consumption) by leveraging partial initialization of internal resolver data structures.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5417/">CVE-2016-5417</cve>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991670">SUSE bug 991670</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334826" comment="glibc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334837" comment="glibc-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339498" comment="glibc-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334827" comment="glibc-i18ndata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334831" comment="glibc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334828" comment="glibc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339499" comment="glibc-locale-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334832" comment="glibc-profile is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334829" comment="nscd is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334833" comment="glibc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334826" comment="glibc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334834" comment="glibc-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334837" comment="glibc-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339498" comment="glibc-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334827" comment="glibc-i18ndata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334831" comment="glibc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334828" comment="glibc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334835" comment="glibc-locale-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339499" comment="glibc-locale-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334832" comment="glibc-profile is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334829" comment="nscd is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5418</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5418" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5418" ref_url="https://www.suse.com/security/cve/CVE-2016-5418" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5418/">CVE-2016-5418</cve>
	<bugzilla href="https://bugzilla.suse.com/998677">SUSE bug 998677</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5440</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5440" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5440" ref_url="https://www.suse.com/security/cve/CVE-2016-5440" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2278-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5440/">CVE-2016-5440</cve>
	<bugzilla href="https://bugzilla.suse.com/989926">SUSE bug 989926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991616">SUSE bug 991616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5542</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5542" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5542" ref_url="https://www.suse.com/security/cve/CVE-2016-5542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2887-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3078-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2862-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2900-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2990-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5542/">CVE-2016-5542</cve>
	<bugzilla href="https://bugzilla.suse.com/1005522">SUSE bug 1005522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1009280">SUSE bug 1009280</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5546</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5546" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5546" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5546" ref_url="https://www.suse.com/security/cve/CVE-2016-5546" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="TID7020150" ref_url="https://www.suse.com/support/kb/doc/?id=7020150" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 7.5 (Integrity impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5546/">CVE-2016-5546</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5547</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5547" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5547" ref_url="https://www.suse.com/security/cve/CVE-2016-5547" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-5547/">CVE-2016-5547</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5548</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5548" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5548" ref_url="https://www.suse.com/security/cve/CVE-2016-5548" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 6.5 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5548/">CVE-2016-5548</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5549</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5549" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5549" ref_url="https://www.suse.com/security/cve/CVE-2016-5549" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 6.5 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5549/">CVE-2016-5549</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5552</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5552" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5552" ref_url="https://www.suse.com/security/cve/CVE-2016-5552" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Integrity impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5552/">CVE-2016-5552</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5554</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5554" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5554" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5554" ref_url="https://www.suse.com/security/cve/CVE-2016-5554" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2887-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3078-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2862-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2900-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2990-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5554/">CVE-2016-5554</cve>
	<bugzilla href="https://bugzilla.suse.com/1005523">SUSE bug 1005523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1009280">SUSE bug 1009280</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5556</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5556" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5556" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5556" ref_url="https://www.suse.com/security/cve/CVE-2016-5556" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2887-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3078-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2862-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2900-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2990-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5556/">CVE-2016-5556</cve>
	<bugzilla href="https://bugzilla.suse.com/1005524">SUSE bug 1005524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1009280">SUSE bug 1009280</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5568</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5568" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5568" ref_url="https://www.suse.com/security/cve/CVE-2016-5568" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2887-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3078-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2862-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2900-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2990-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5568/">CVE-2016-5568</cve>
	<bugzilla href="https://bugzilla.suse.com/1005525">SUSE bug 1005525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1009280">SUSE bug 1009280</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5573</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5573" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5573" ref_url="https://www.suse.com/security/cve/CVE-2016-5573" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2887-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3078-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2862-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2900-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2990-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5573/">CVE-2016-5573</cve>
	<bugzilla href="https://bugzilla.suse.com/1005526">SUSE bug 1005526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1009280">SUSE bug 1009280</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165582" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5582</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5582" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5582" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5582" ref_url="https://www.suse.com/security/cve/CVE-2016-5582" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2887-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002431.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2862-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2900-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2990-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5573.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5582/">CVE-2016-5582</cve>
	<bugzilla href="https://bugzilla.suse.com/1005527">SUSE bug 1005527</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5584</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5584" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5584" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5584" ref_url="https://www.suse.com/security/cve/CVE-2016-5584" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5584/">CVE-2016-5584</cve>
	<bugzilla href="https://bugzilla.suse.com/1005558">SUSE bug 1005558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5597</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5597" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5597" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5597" ref_url="https://www.suse.com/security/cve/CVE-2016-5597" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2887-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3078-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2862-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2900-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2985-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2990-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00069.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality via vectors related to Networking.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5597/">CVE-2016-5597</cve>
	<bugzilla href="https://bugzilla.suse.com/1005528">SUSE bug 1005528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1009280">SUSE bug 1009280</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5624</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5624" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5624" ref_url="https://www.suse.com/security/cve/CVE-2016-5624" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5624/">CVE-2016-5624</cve>
	<bugzilla href="https://bugzilla.suse.com/1005564">SUSE bug 1005564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5626</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5626" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5626" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5626" ref_url="https://www.suse.com/security/cve/CVE-2016-5626" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5626/">CVE-2016-5626</cve>
	<bugzilla href="https://bugzilla.suse.com/1005566">SUSE bug 1005566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5629</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5629" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5629" ref_url="https://www.suse.com/security/cve/CVE-2016-5629" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5629/">CVE-2016-5629</cve>
	<bugzilla href="https://bugzilla.suse.com/1005569">SUSE bug 1005569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5636</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5636" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5636" ref_url="https://www.suse.com/security/cve/CVE-2016-5636" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1885-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5636/">CVE-2016-5636</cve>
	<bugzilla href="https://bugzilla.suse.com/1065451">SUSE bug 1065451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106262">SUSE bug 1106262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985177">SUSE bug 985177</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5652</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5652" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5652" ref_url="https://www.suse.com/security/cve/CVE-2016-5652" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5652/">CVE-2016-5652</cve>
	<bugzilla href="https://bugzilla.suse.com/1007280">SUSE bug 1007280</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5696</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5696" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5696" ref_url="https://www.suse.com/security/cve/CVE-2016-5696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3069-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00013.html" source="SUSE-SU"/>
    <description>
    net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-5696/">CVE-2016-5696</cve>
	<bugzilla href="https://bugzilla.suse.com/1020452">SUSE bug 1020452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175721">SUSE bug 1175721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989152">SUSE bug 989152</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5699</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5699" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5699" ref_url="https://www.suse.com/security/cve/CVE-2016-5699" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2270-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002263.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002407.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1885-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5699/">CVE-2016-5699</cve>
	<bugzilla href="https://bugzilla.suse.com/1122729">SUSE bug 1122729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985348">SUSE bug 985348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985351">SUSE bug 985351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986630">SUSE bug 986630</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5735</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5735" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5735" ref_url="https://www.suse.com/security/cve/CVE-2016-5735" source="SUSE CVE"/>
    <description>
    Integer overflow in the rwpng_read_image24_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact via a crafted PNG file, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5735/">CVE-2016-5735</cve>
	<bugzilla href="https://bugzilla.suse.com/1173616">SUSE bug 1173616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348235" comment="pngquant is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5759</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5759" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5759" ref_url="https://www.suse.com/security/cve/CVE-2016-5759" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002337.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00083.html" source="SUSE-SU"/>
    <description>
    The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5759/">CVE-2016-5759</cve>
	<bugzilla href="https://bugzilla.suse.com/990200">SUSE bug 990200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481198" comment="kdump-0.9.0-2.3 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5766</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5766" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5766" ref_url="https://www.suse.com/security/cve/CVE-2016-5766" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-July/002163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2013-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003246.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1761-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1922-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2337-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2366-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00016.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5766/">CVE-2016-5766</cve>
	<bugzilla href="https://bugzilla.suse.com/986386">SUSE bug 986386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5823</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5823" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5823" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5823" ref_url="https://www.suse.com/security/cve/CVE-2016-5823" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003605.html" source="SUSE-SU"/>
    <description>
    The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5823/">CVE-2016-5823</cve>
	<bugzilla href="https://bugzilla.suse.com/986632">SUSE bug 986632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338912" comment="libical-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659675" comment="libical2 is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5824</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5824" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5824" ref_url="https://www.suse.com/security/cve/CVE-2016-5824" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1989-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003605.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00108.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00069.html" source="SUSE-SU"/>
    <description>
    libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5824/">CVE-2016-5824</cve>
	<bugzilla href="https://bugzilla.suse.com/1015964">SUSE bug 1015964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122983">SUSE bug 1122983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986631">SUSE bug 986631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986639">SUSE bug 986639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986642">SUSE bug 986642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986658">SUSE bug 986658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480551" comment="libical2-2.0.0-1.37 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482795" comment="libical-devel-2.0.0-1.37 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790318" comment="MozillaThunderbird-60.5.0-3.20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790319" comment="MozillaThunderbird-translations-common-60.5.0-3.20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790320" comment="MozillaThunderbird-translations-other-60.5.0-3.20.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5825</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5825" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5825" ref_url="https://www.suse.com/security/cve/CVE-2016-5825" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003605.html" source="SUSE-SU"/>
    <description>
    The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted ics file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5825/">CVE-2016-5825</cve>
	<bugzilla href="https://bugzilla.suse.com/986631">SUSE bug 986631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986639">SUSE bug 986639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986642">SUSE bug 986642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986658">SUSE bug 986658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338912" comment="libical-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659675" comment="libical2 is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5826</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5826" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5826" ref_url="https://www.suse.com/security/cve/CVE-2016-5826" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003605.html" source="SUSE-SU"/>
    <description>
    The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by crafting a string to the icalparser_parse_string function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5826/">CVE-2016-5826</cve>
	<bugzilla href="https://bugzilla.suse.com/986631">SUSE bug 986631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986639">SUSE bug 986639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986642">SUSE bug 986642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986658">SUSE bug 986658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338912" comment="libical-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659675" comment="libical2 is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5827</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5827" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5827" ref_url="https://www.suse.com/security/cve/CVE-2016-5827" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1989-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003605.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00108.html" source="SUSE-SU"/>
    <description>
    The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5827/">CVE-2016-5827</cve>
	<bugzilla href="https://bugzilla.suse.com/986631">SUSE bug 986631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986639">SUSE bug 986639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986642">SUSE bug 986642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986658">SUSE bug 986658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480551" comment="libical2-2.0.0-1.37 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482795" comment="libical-devel-2.0.0-1.37 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5828</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5828" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5828" ref_url="https://www.suse.com/security/cve/CVE-2016-5828" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1937-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html" source="SUSE-SU"/>
    <description>
    The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service (invalid process state or TM Bad Thing exception, and system crash) or possibly have unspecified other impact by starting and suspending a transaction before an exec system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5828/">CVE-2016-5828</cve>
	<bugzilla href="https://bugzilla.suse.com/986569">SUSE bug 986569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991065">SUSE bug 991065</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5844</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5844" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5844" ref_url="https://www.suse.com/security/cve/CVE-2016-5844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5844/">CVE-2016-5844</cve>
	<bugzilla href="https://bugzilla.suse.com/986566">SUSE bug 986566</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5875</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-5875" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5875" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-5875" ref_url="https://www.suse.com/security/cve/CVE-2016-5875" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002264.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1889-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-5314.  Reason: This candidate is a reservation duplicate of CVE-2016-5314.  Notes: All CVE users should reference CVE-2016-5314 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-5875/">CVE-2016-5875</cve>
	<bugzilla href="https://bugzilla.suse.com/1007284">SUSE bug 1007284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984809">SUSE bug 984809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984831">SUSE bug 984831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987351">SUSE bug 987351</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6128</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6128" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6128" ref_url="https://www.suse.com/security/cve/CVE-2016-6128" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2460-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2071-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2117-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00004.html" source="SUSE-SU"/>
    <description>
    The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application crash) via an invalid color index.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6128/">CVE-2016-6128</cve>
	<bugzilla href="https://bugzilla.suse.com/987580">SUSE bug 987580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991710">SUSE bug 991710</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6130</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6130" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6130" ref_url="https://www.suse.com/security/cve/CVE-2016-6130" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00013.html" source="SUSE-SU"/>
    <description>
    Race condition in the sclp_ctl_ioctl_sccb function in drivers/s390/char/sclp_ctl.c in the Linux kernel before 4.6 allows local users to obtain sensitive information from kernel memory by changing a certain length value, aka a "double fetch" vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.2/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6130/">CVE-2016-6130</cve>
	<bugzilla href="https://bugzilla.suse.com/987542">SUSE bug 987542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6131</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6131" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6131" ref_url="https://www.suse.com/security/cve/CVE-2016-6131" source="SUSE CVE"/>
    <description>
    The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and crash) via a cycle in the references of remembered mangled types.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6131/">CVE-2016-6131</cve>
	<bugzilla href="https://bugzilla.suse.com/1075785">SUSE bug 1075785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987552">SUSE bug 987552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987631">SUSE bug 987631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987633">SUSE bug 987633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987635">SUSE bug 987635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987637">SUSE bug 987637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987644">SUSE bug 987644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335833" comment="binutils-gold is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334069" comment="binutils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335832" comment="binutils-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337413" comment="binutils-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342534" comment="libctf-nobfd0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342535" comment="libctf0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654015" comment="crash is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654016" comment="crash-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009660320" comment="crash-gcore is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654018" comment="crash-kmp-default is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6132</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6132" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6132" ref_url="https://www.suse.com/security/cve/CVE-2016-6132" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002271.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2117-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html" source="SUSE-SU"/>
    <description>
    The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6132/">CVE-2016-6132</cve>
	<bugzilla href="https://bugzilla.suse.com/987577">SUSE bug 987577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991436">SUSE bug 991436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995034">SUSE bug 995034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6136</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6136" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6136" ref_url="https://www.suse.com/security/cve/CVE-2016-6136" source="SUSE CVE"/>
    <description>
    Race condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set restrictions or disrupt system-call auditing by changing a certain string, aka a "double fetch" vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6136/">CVE-2016-6136</cve>
	<bugzilla href="https://bugzilla.suse.com/988153">SUSE bug 988153</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6170</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6170" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6170" ref_url="https://www.suse.com/security/cve/CVE-2016-6170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0999-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002797.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00022.html" source="SUSE-SU"/>
    <description>
    ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-08-11"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6170/">CVE-2016-6170</cve>
	<bugzilla href="https://bugzilla.suse.com/1028603">SUSE bug 1028603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987866">SUSE bug 987866</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335113" comment="bind-chrootenv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335115" comment="bind-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335114" comment="bind-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335112" comment="bind-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634659" comment="libbind9-1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634660" comment="libdns1605 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634661" comment="libirs-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634662" comment="libirs1601 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634663" comment="libisc1606 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634664" comment="libisccc1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634665" comment="libisccfg1600 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634666" comment="libns1604 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009634667" comment="python3-bind is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6197</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6197" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6197" ref_url="https://www.suse.com/security/cve/CVE-2016-6197" source="SUSE CVE"/>
    <description>
    fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a rename system call that specifies a self-hardlink.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6197/">CVE-2016-6197</cve>
	<bugzilla href="https://bugzilla.suse.com/988708">SUSE bug 988708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6198</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6198" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6198" ref_url="https://www.suse.com/security/cve/CVE-2016-6198" source="SUSE CVE"/>
    <description>
    The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service (system crash) via a rename system call, related to fs/namei.c and fs/open.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6198/">CVE-2016-6198</cve>
	<bugzilla href="https://bugzilla.suse.com/988708">SUSE bug 988708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6207</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6207" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6207" ref_url="https://www.suse.com/security/cve/CVE-2016-6207" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002271.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2460-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2071-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2117-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6207/">CVE-2016-6207</cve>
	<bugzilla href="https://bugzilla.suse.com/991434">SUSE bug 991434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991622">SUSE bug 991622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6210</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6210" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6210" ref_url="https://www.suse.com/security/cve/CVE-2016-6210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002265.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2339-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00068.html" source="SUSE-SU"/>
    <description>
    sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6210/">CVE-2016-6210</cve>
	<bugzilla href="https://bugzilla.suse.com/1001712">SUSE bug 1001712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105010">SUSE bug 1105010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138392">SUSE bug 1138392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989363">SUSE bug 989363</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488406" comment="openssh-fips-7.9p1-4.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481607" comment="openssh-7.9p1-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481608" comment="openssh-helpers-7.9p1-4.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6213</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6213" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6213" ref_url="https://www.suse.com/security/cve/CVE-2016-6213" source="SUSE CVE"/>
    <description>
    fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service (memory consumption and deadlock) via MS_BIND mount system calls, as demonstrated by a loop that triggers exponential growth in the number of mounts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6213/">CVE-2016-6213</cve>
	<bugzilla href="https://bugzilla.suse.com/988964">SUSE bug 988964</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6214</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6214" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6214" ref_url="https://www.suse.com/security/cve/CVE-2016-6214" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002271.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2117-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html" source="SUSE-SU"/>
    <description>
    gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6214/">CVE-2016-6214</cve>
	<bugzilla href="https://bugzilla.suse.com/987577">SUSE bug 987577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991436">SUSE bug 991436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995034">SUSE bug 995034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6223</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6223" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6223" ref_url="https://www.suse.com/security/cve/CVE-2016-6223" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00061.html" source="SUSE-SU"/>
    <description>
    The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6223/">CVE-2016-6223</cve>
	<bugzilla href="https://bugzilla.suse.com/990460">SUSE bug 990460</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782665" comment="libtiff5-32bit-4.0.9-5.20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782663" comment="libtiff-devel-4.0.9-5.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782664" comment="libtiff5-4.0.9-5.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6250</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6250" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6250" ref_url="https://www.suse.com/security/cve/CVE-2016-6250" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-6250/">CVE-2016-6250</cve>
	<bugzilla href="https://bugzilla.suse.com/989980">SUSE bug 989980</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6258</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6258" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6258" ref_url="https://www.suse.com/security/cve/CVE-2016-6258" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6258/">CVE-2016-6258</cve>
	<bugzilla href="https://bugzilla.suse.com/1072198">SUSE bug 1072198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072223">SUSE bug 1072223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988675">SUSE bug 988675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988692">SUSE bug 988692</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6259</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6259" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6259" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6259" ref_url="https://www.suse.com/security/cve/CVE-2016-6259" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6259/">CVE-2016-6259</cve>
	<bugzilla href="https://bugzilla.suse.com/988676">SUSE bug 988676</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/988694">SUSE bug 988694</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6261</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6261" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6261" ref_url="https://www.suse.com/security/cve/CVE-2016-6261" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html" source="SUSE-SU"/>
    <description>
    The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via 64 bytes of input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6261/">CVE-2016-6261</cve>
	<bugzilla href="https://bugzilla.suse.com/1118435">SUSE bug 1118435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173590">SUSE bug 1173590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990190">SUSE bug 990190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480552" comment="libidn-devel-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480553" comment="libidn11-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481380" comment="libidn11-32bit-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480554" comment="libidn2-0-2.0.4-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480555" comment="libidn2-0-32bit-2.0.4-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480556" comment="libidn2-devel-2.0.4-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6262</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6262" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6262" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6262" ref_url="https://www.suse.com/security/cve/CVE-2016-6262" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html" source="SUSE-SU"/>
    <description>
    idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6262/">CVE-2016-6262</cve>
	<bugzilla href="https://bugzilla.suse.com/1014473">SUSE bug 1014473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173590">SUSE bug 1173590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190777">SUSE bug 1190777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990189">SUSE bug 990189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480552" comment="libidn-devel-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480553" comment="libidn11-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481380" comment="libidn11-32bit-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480554" comment="libidn2-0-2.0.4-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480555" comment="libidn2-0-32bit-2.0.4-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480556" comment="libidn2-devel-2.0.4-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6263</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6263" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6263" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6263" ref_url="https://www.suse.com/security/cve/CVE-2016-6263" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002269.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html" source="SUSE-SU"/>
    <description>
    The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted UTF-8 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6263/">CVE-2016-6263</cve>
	<bugzilla href="https://bugzilla.suse.com/1118435">SUSE bug 1118435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990191">SUSE bug 990191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480552" comment="libidn-devel-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480553" comment="libidn11-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481380" comment="libidn11-32bit-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480554" comment="libidn2-0-2.0.4-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480555" comment="libidn2-0-32bit-2.0.4-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480556" comment="libidn2-devel-2.0.4-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6293</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6293" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6293" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6293" ref_url="https://www.suse.com/security/cve/CVE-2016-6293" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1401-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1401-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004696.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004167.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1422-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00103.html" source="SUSE-SU"/>
    <description>
    The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long httpAcceptLanguage argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6293/">CVE-2016-6293</cve>
	<bugzilla href="https://bugzilla.suse.com/1035111">SUSE bug 1035111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123121">SUSE bug 1123121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990636">SUSE bug 990636</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337112" comment="libicu-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625487" comment="libicu60_2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625488" comment="libicu60_2-bedata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625489" comment="libicu60_2-ledata is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6294</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6294" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6294" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6294" ref_url="https://www.suse.com/security/cve/CVE-2016-6294" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002949.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002994.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1757-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1800-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00029.html" source="SUSE-SU"/>
    <description>
    The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restrict calls to the ICU uloc_acceptLanguageFromHTTP function, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6294/">CVE-2016-6294</cve>
	<bugzilla href="https://bugzilla.suse.com/1035111">SUSE bug 1035111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044976">SUSE bug 1044976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990636">SUSE bug 990636</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337112" comment="libicu-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625487" comment="libicu60_2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625488" comment="libicu60_2-bedata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625489" comment="libicu60_2-ledata is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6301</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6301" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6301" ref_url="https://www.suse.com/security/cve/CVE-2016-6301" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6301/">CVE-2016-6301</cve>
	<bugzilla href="https://bugzilla.suse.com/991940">SUSE bug 991940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663736" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663741" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663750" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663751" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663766" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663767" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6302</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6302" ref_url="https://www.suse.com/security/cve/CVE-2016-6302" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6302/">CVE-2016-6302</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994844">SUSE bug 994844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995324">SUSE bug 995324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6303</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6303" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6303" ref_url="https://www.suse.com/security/cve/CVE-2016-6303" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6303/">CVE-2016-6303</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994844">SUSE bug 994844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995377">SUSE bug 995377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6304</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6304" ref_url="https://www.suse.com/security/cve/CVE-2016-6304" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6304/">CVE-2016-6304</cve>
	<bugzilla href="https://bugzilla.suse.com/1001706">SUSE bug 1001706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1003811">SUSE bug 1003811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005579">SUSE bug 1005579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021375">SUSE bug 1021375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999666">SUSE bug 999666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166306" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6306</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6306" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6306" ref_url="https://www.suse.com/security/cve/CVE-2016-6306" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2469-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2537-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-17"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6306/">CVE-2016-6306</cve>
	<bugzilla href="https://bugzilla.suse.com/1004104">SUSE bug 1004104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999665">SUSE bug 999665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999668">SUSE bug 999668</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6313</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6313" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6313" ref_url="https://www.suse.com/security/cve/CVE-2016-6313" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00108.html" source="SUSE-SU"/>
    <description>
    The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6313/">CVE-2016-6313</cve>
	<bugzilla href="https://bugzilla.suse.com/1123792">SUSE bug 1123792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994157">SUSE bug 994157</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481367" comment="libgcrypt-devel-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481368" comment="libgcrypt20-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481369" comment="libgcrypt20-32bit-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481370" comment="libgcrypt20-hmac-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481371" comment="libgcrypt20-hmac-32bit-1.8.2-6.7 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6318</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6318" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6318" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6318" ref_url="https://www.suse.com/security/cve/CVE-2016-6318" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-August/002220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00122.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges via a long GECOS field, involving longbuffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6318/">CVE-2016-6318</cve>
	<bugzilla href="https://bugzilla.suse.com/1123113">SUSE bug 1123113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992966">SUSE bug 992966</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480148" comment="cracklib-2.9.6-2.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480149" comment="cracklib-devel-2.9.6-2.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480150" comment="cracklib-dict-small-2.9.6-2.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480151" comment="libcrack2-2.9.6-2.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480152" comment="libcrack2-32bit-2.9.6-2.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6321</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6321" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6321" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6321" ref_url="https://www.suse.com/security/cve/CVE-2016-6321" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002417.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2874-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3003-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00028.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-6321/">CVE-2016-6321</cve>
	<bugzilla href="https://bugzilla.suse.com/1007188">SUSE bug 1007188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123796">SUSE bug 1123796</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334556" comment="tar is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481663" comment="tar-1.30-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481664" comment="tar-lang-1.30-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481665" comment="tar-rmt-1.30-3.3.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6323</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6323" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6323" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6323" ref_url="https://www.suse.com/security/cve/CVE-2016-6323" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2443-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00009.html" source="SUSE-SU"/>
    <description>
    The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6323/">CVE-2016-6323</cve>
	<bugzilla href="https://bugzilla.suse.com/994359">SUSE bug 994359</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6328</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6328" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6328" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6328" ref_url="https://www.suse.com/security/cve/CVE-2016-6328" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003625.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006894.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1553-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007105.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0211-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-6328/">CVE-2016-6328</cve>
	<bugzilla href="https://bugzilla.suse.com/1055857">SUSE bug 1055857</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497865" comment="libexif12-32bit-0.6.22-5.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009495172" comment="libexif-devel-0.6.22-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495173" comment="libexif12-0.6.22-5.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6351</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6351" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6351" ref_url="https://www.suse.com/security/cve/CVE-2016-6351" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or execute arbitrary code on the QEMU host via vectors involving DMA read into ESP command buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6351/">CVE-2016-6351</cve>
	<bugzilla href="https://bugzilla.suse.com/990835">SUSE bug 990835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990843">SUSE bug 990843</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6352</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6352" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6352" ref_url="https://www.suse.com/security/cve/CVE-2016-6352" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002333.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00040.html" source="SUSE-SU"/>
    <description>
    The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6352/">CVE-2016-6352</cve>
	<bugzilla href="https://bugzilla.suse.com/1027024">SUSE bug 1027024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991450">SUSE bug 991450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480251" comment="gdk-pixbuf-devel-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480252" comment="gdk-pixbuf-lang-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480253" comment="gdk-pixbuf-query-loaders-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480254" comment="gdk-pixbuf-thumbnailer-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480255" comment="libgdk_pixbuf-2_0-0-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480256" comment="typelib-1_0-GdkPixbuf-2_0-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482688" comment="gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482689" comment="libgdk_pixbuf-2_0-0-32bit-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6354</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6354" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6354" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6354" ref_url="https://www.suse.com/security/cve/CVE-2016-6354" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2397-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002293.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2167-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00104.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2182-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2253-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2378-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2450-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0356-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00001.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6354/">CVE-2016-6354</cve>
	<bugzilla href="https://bugzilla.suse.com/1026047">SUSE bug 1026047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/990856">SUSE bug 990856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6480</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6480" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6480" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6480" ref_url="https://www.suse.com/security/cve/CVE-2016-6480" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2178-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2179-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3069-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00013.html" source="SUSE-SU"/>
    <description>
    Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a "double fetch" vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6480/">CVE-2016-6480</cve>
	<bugzilla href="https://bugzilla.suse.com/1004418">SUSE bug 1004418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991608">SUSE bug 991608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991667">SUSE bug 991667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992568">SUSE bug 992568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6489</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6489" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6489" ref_url="https://www.suse.com/security/cve/CVE-2016-6489" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002936.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1533-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00032.html" source="SUSE-SU"/>
    <description>
    The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6489/">CVE-2016-6489</cve>
	<bugzilla href="https://bugzilla.suse.com/991464">SUSE bug 991464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481375" comment="libhogweed4-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481376" comment="libhogweed4-32bit-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481377" comment="libnettle-devel-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481378" comment="libnettle6-3.4.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481379" comment="libnettle6-32bit-3.4.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6490</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6490" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6490" ref_url="https://www.suse.com/security/cve/CVE-2016-6490" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the descriptor buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6490/">CVE-2016-6490</cve>
	<bugzilla href="https://bugzilla.suse.com/991466">SUSE bug 991466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/993854">SUSE bug 993854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6505</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6505" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6505" ref_url="https://www.suse.com/security/cve/CVE-2016-6505" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1974-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00023.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6505/">CVE-2016-6505</cve>
	<bugzilla href="https://bugzilla.suse.com/991013">SUSE bug 991013</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6508</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6508" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6508" ref_url="https://www.suse.com/security/cve/CVE-2016-6508" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1974-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00023.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (large loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6508/">CVE-2016-6508</cve>
	<bugzilla href="https://bugzilla.suse.com/991017">SUSE bug 991017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6509</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6509" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6509" ref_url="https://www.suse.com/security/cve/CVE-2016-6509" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1974-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00023.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6509/">CVE-2016-6509</cve>
	<bugzilla href="https://bugzilla.suse.com/991018">SUSE bug 991018</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6510</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6510" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6510" ref_url="https://www.suse.com/security/cve/CVE-2016-6510" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1974-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00023.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6510/">CVE-2016-6510</cve>
	<bugzilla href="https://bugzilla.suse.com/991019">SUSE bug 991019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6511</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6511" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6511" ref_url="https://www.suse.com/security/cve/CVE-2016-6511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002307.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1974-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00023.html" source="SUSE-SU"/>
    <description>
    epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6511/">CVE-2016-6511</cve>
	<bugzilla href="https://bugzilla.suse.com/991020">SUSE bug 991020</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6512</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6512" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6512" ref_url="https://www.suse.com/security/cve/CVE-2016-6512" source="SUSE CVE"/>
    <description>
    epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet, related to the MMSE, WAP, WBXML, and WSP dissectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6512/">CVE-2016-6512</cve>
	<bugzilla href="https://bugzilla.suse.com/991021">SUSE bug 991021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6513</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6513" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6513" ref_url="https://www.suse.com/security/cve/CVE-2016-6513" source="SUSE CVE"/>
    <description>
    epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6513/">CVE-2016-6513</cve>
	<bugzilla href="https://bugzilla.suse.com/991022">SUSE bug 991022</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6515</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6515" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6515" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6515" ref_url="https://www.suse.com/security/cve/CVE-2016-6515" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2280-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002265.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2388-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002289.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002338.html" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2339-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00068.html" source="SUSE-SU"/>
    <description>
    The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6515/">CVE-2016-6515</cve>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992533">SUSE bug 992533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488406" comment="openssh-fips-7.9p1-4.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481607" comment="openssh-7.9p1-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481608" comment="openssh-helpers-7.9p1-4.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6583</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6583" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6583" ref_url="https://www.suse.com/security/cve/CVE-2016-6583" source="SUSE CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<cve href="https://www.suse.com/security/cve/CVE-2016-6583/">CVE-2016-6583</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487680" comment="libtidy-devel-5.4.0-1.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487681" comment="libtidy5-5.4.0-1.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487682" comment="tidy-5.4.0-1.34 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6662</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6662" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6662" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6662" ref_url="https://www.suse.com/security/cve/CVE-2016-6662" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2448-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6662/">CVE-2016-6662</cve>
	<bugzilla href="https://bugzilla.suse.com/1001367">SUSE bug 1001367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005580">SUSE bug 1005580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020873">SUSE bug 1020873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020884">SUSE bug 1020884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021755">SUSE bug 1021755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998309">SUSE bug 998309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6663</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6663" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6663" ref_url="https://www.suse.com/security/cve/CVE-2016-6663" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6663/">CVE-2016-6663</cve>
	<bugzilla href="https://bugzilla.suse.com/1001367">SUSE bug 1001367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008253">SUSE bug 1008253</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021755">SUSE bug 1021755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998309">SUSE bug 998309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6664</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6664" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6664" ref_url="https://www.suse.com/security/cve/CVE-2016-6664" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
    <description>
    mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6664/">CVE-2016-6664</cve>
	<bugzilla href="https://bugzilla.suse.com/1008253">SUSE bug 1008253</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020873">SUSE bug 1020873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998309">SUSE bug 998309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6786</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6786" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6786" ref_url="https://www.suse.com/security/cve/CVE-2016-6786" source="SUSE CVE"/>
    <description>
    kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 30955111.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6786/">CVE-2016-6786</cve>
	<bugzilla href="https://bugzilla.suse.com/1015160">SUSE bug 1015160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1025626">SUSE bug 1025626</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6787</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6787" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6787" ref_url="https://www.suse.com/security/cve/CVE-2016-6787" source="SUSE CVE"/>
    <description>
    kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 31095224.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6787/">CVE-2016-6787</cve>
	<bugzilla href="https://bugzilla.suse.com/1015160">SUSE bug 1015160</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6828</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6828" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6828" ref_url="https://www.suse.com/security/cve/CVE-2016-6828" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3069-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00013.html" source="SUSE-SU"/>
    <description>
    The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6828/">CVE-2016-6828</cve>
	<bugzilla href="https://bugzilla.suse.com/1052256">SUSE bug 1052256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994296">SUSE bug 994296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6833</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6833" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6833" ref_url="https://www.suse.com/security/cve/CVE-2016-6833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6833/">CVE-2016-6833</cve>
	<bugzilla href="https://bugzilla.suse.com/994774">SUSE bug 994774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994775">SUSE bug 994775</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6836</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6836" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6836" ref_url="https://www.suse.com/security/cve/CVE-2016-6836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6836/">CVE-2016-6836</cve>
	<bugzilla href="https://bugzilla.suse.com/994760">SUSE bug 994760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994761">SUSE bug 994761</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6855</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6855" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6855" ref_url="https://www.suse.com/security/cve/CVE-2016-6855" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002405.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2242-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6855/">CVE-2016-6855</cve>
	<bugzilla href="https://bugzilla.suse.com/994819">SUSE bug 994819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482657" comment="eog-3.26.2-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482658" comment="eog-devel-3.26.2-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482659" comment="eog-lang-3.26.2-3.39 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6888</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6888" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6888" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6888" ref_url="https://www.suse.com/security/cve/CVE-2016-6888" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6888/">CVE-2016-6888</cve>
	<bugzilla href="https://bugzilla.suse.com/994771">SUSE bug 994771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/994772">SUSE bug 994772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6905</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6905" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6905" ref_url="https://www.suse.com/security/cve/CVE-2016-6905" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2303-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-September/002271.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2203-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-08/msg00121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2363-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html" source="SUSE-SU"/>
    <description>
    The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6905/">CVE-2016-6905</cve>
	<bugzilla href="https://bugzilla.suse.com/995034">SUSE bug 995034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6912</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-6912" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6912" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-6912" ref_url="https://www.suse.com/security/cve/CVE-2016-6912" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002645.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00101.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6912/">CVE-2016-6912</cve>
	<bugzilla href="https://bugzilla.suse.com/1022284">SUSE bug 1022284</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7031</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7031" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7031" ref_url="https://www.suse.com/security/cve/CVE-2016-7031" source="SUSE CVE"/>
    <description>
    The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7031/">CVE-2016-7031</cve>
	<bugzilla href="https://bugzilla.suse.com/997025">SUSE bug 997025</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335682" comment="ceph-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336219" comment="libcephfs-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336216" comment="libcephfs2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336220" comment="librados-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335684" comment="librados2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341012" comment="libradospp-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336221" comment="librbd-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335686" comment="librbd1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337948" comment="librgw-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336217" comment="librgw2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337899" comment="python3-ceph-argparse is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337900" comment="python3-cephfs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337901" comment="python3-rados is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337902" comment="python3-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337903" comment="python3-rgw is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337949" comment="rados-objclass-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7032</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7032" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7032" ref_url="https://www.suse.com/security/cve/CVE-2016-7032" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002420.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2878-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2983-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3004-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7032/">CVE-2016-7032</cve>
	<bugzilla href="https://bugzilla.suse.com/1007501">SUSE bug 1007501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007766">SUSE bug 1007766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011975">SUSE bug 1011975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011976">SUSE bug 1011976</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659701" comment="sudo-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481659" comment="sudo-1.8.22-4.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481660" comment="sudo-devel-1.8.22-4.3.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7052</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7052" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7052" ref_url="https://www.suse.com/security/cve/CVE-2016-7052" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2470-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID7018311" ref_url="https://www.suse.com/support/kb/doc/?id=7018311" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7052/">CVE-2016-7052</cve>
	<bugzilla href="https://bugzilla.suse.com/1001148">SUSE bug 1001148</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7055</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7055" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7055" ref_url="https://www.suse.com/security/cve/CVE-2016-7055" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0481-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0941-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker's direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients have to choose the curve in question and the server has to share the private key among them, neither of which is default behaviour. Even then only clients that chose the curve will be affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7055/">CVE-2016-7055</cve>
	<bugzilla href="https://bugzilla.suse.com/1009528">SUSE bug 1009528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021641">SUSE bug 1021641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7056</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7056" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7056" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7056" ref_url="https://www.suse.com/security/cve/CVE-2016-7056" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0409-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0487-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1211-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7056/">CVE-2016-7056</cve>
	<bugzilla href="https://bugzilla.suse.com/1005878">SUSE bug 1005878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1019334">SUSE bug 1019334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148697">SUSE bug 1148697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7069</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7069" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7069" ref_url="https://www.suse.com/security/cve/CVE-2016-7069" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2023:2760-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2777-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030190.html" source="SUSE-SU"/>
    <description>
    An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-05"/>
	<updated date="2023-07-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7069/">CVE-2016-7069</cve>
	<bugzilla href="https://bugzilla.suse.com/1054799">SUSE bug 1054799</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009770587" comment="dnsdist-1.8.0-150100.3.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009770645" comment="dnsdist-1.8.0-150100.3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7076</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7076" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7076" ref_url="https://www.suse.com/security/cve/CVE-2016-7076" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002413.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002420.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2878-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2983-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3004-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7076/">CVE-2016-7076</cve>
	<bugzilla href="https://bugzilla.suse.com/1007501">SUSE bug 1007501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011975">SUSE bug 1011975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011976">SUSE bug 1011976</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481659" comment="sudo-1.8.22-4.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481660" comment="sudo-devel-1.8.22-4.3.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7092</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7092" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7092" ref_url="https://www.suse.com/security/cve/CVE-2016-7092" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7092/">CVE-2016-7092</cve>
	<bugzilla href="https://bugzilla.suse.com/995785">SUSE bug 995785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7093</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7093" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7093" ref_url="https://www.suse.com/security/cve/CVE-2016-7093" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7093/">CVE-2016-7093</cve>
	<bugzilla href="https://bugzilla.suse.com/995789">SUSE bug 995789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7094</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7094" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7094" ref_url="https://www.suse.com/security/cve/CVE-2016-7094" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2528-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2533-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2725-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00022.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7094/">CVE-2016-7094</cve>
	<bugzilla href="https://bugzilla.suse.com/995792">SUSE bug 995792</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7097</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7097" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7097" ref_url="https://www.suse.com/security/cve/CVE-2016-7097" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="TID7018489" ref_url="https://www.suse.com/support/kb/doc/?id=7018489" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00027.html" source="SUSE-SU"/>
    <description>
    The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-7097/">CVE-2016-7097</cve>
	<bugzilla href="https://bugzilla.suse.com/1021258">SUSE bug 1021258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052256">SUSE bug 1052256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/870618">SUSE bug 870618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995968">SUSE bug 995968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7116</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7116" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7116" ref_url="https://www.suse.com/security/cve/CVE-2016-7116" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a .. (dot dot) in an unspecified string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7116/">CVE-2016-7116</cve>
	<bugzilla href="https://bugzilla.suse.com/996441">SUSE bug 996441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7117</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7117" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7117" ref_url="https://www.suse.com/security/cve/CVE-2016-7117" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3104-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0575-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2342-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0456-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00022.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7117/">CVE-2016-7117</cve>
	<bugzilla href="https://bugzilla.suse.com/1003077">SUSE bug 1003077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1003253">SUSE bug 1003253</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057478">SUSE bug 1057478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071943">SUSE bug 1071943</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7155</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7155" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7155" ref_url="https://www.suse.com/security/cve/CVE-2016-7155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7155/">CVE-2016-7155</cve>
	<bugzilla href="https://bugzilla.suse.com/997858">SUSE bug 997858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7156</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7156" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7156" ref_url="https://www.suse.com/security/cve/CVE-2016-7156" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00060.html" source="SUSE-SU"/>
    <description>
    The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7156/">CVE-2016-7156</cve>
	<bugzilla href="https://bugzilla.suse.com/997859">SUSE bug 997859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7157</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7157" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7157" ref_url="https://www.suse.com/security/cve/CVE-2016-7157" source="SUSE CVE"/>
    <description>
    The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via vectors involving MPTSAS_CONFIG_PACK.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7157/">CVE-2016-7157</cve>
	<bugzilla href="https://bugzilla.suse.com/997860">SUSE bug 997860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7161</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7161" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7161" ref_url="https://www.suse.com/security/cve/CVE-2016-7161" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7161/">CVE-2016-7161</cve>
	<bugzilla href="https://bugzilla.suse.com/1001151">SUSE bug 1001151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1001152">SUSE bug 1001152</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7162</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7162" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7162" ref_url="https://www.suse.com/security/cve/CVE-2016-7162" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2338-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00067.html" source="SUSE-SU"/>
    <description>
    The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-7162/">CVE-2016-7162</cve>
	<bugzilla href="https://bugzilla.suse.com/997822">SUSE bug 997822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338935" comment="file-roller is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338936" comment="file-roller-lang is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7163</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7163" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7163" ref_url="https://www.suse.com/security/cve/CVE-2016-7163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003133.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2186-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00082.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7163/">CVE-2016-7163</cve>
	<bugzilla href="https://bugzilla.suse.com/1007739">SUSE bug 1007739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007744">SUSE bug 1007744</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/997857">SUSE bug 997857</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7166</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7166" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7166" ref_url="https://www.suse.com/security/cve/CVE-2016-7166" source="SUSE CVE"/>
    <description>
    libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7166/">CVE-2016-7166</cve>
	<bugzilla href="https://bugzilla.suse.com/998115">SUSE bug 998115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334266" comment="bsdtar is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335917" comment="libarchive-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335916" comment="libarchive13 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7167</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7167" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7167" ref_url="https://www.suse.com/security/cve/CVE-2016-7167" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7167/">CVE-2016-7167</cve>
	<bugzilla href="https://bugzilla.suse.com/998760">SUSE bug 998760</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7170</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7170" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7170" ref_url="https://www.suse.com/security/cve/CVE-2016-7170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINE_CURSOR svga command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7170/">CVE-2016-7170</cve>
	<bugzilla href="https://bugzilla.suse.com/998516">SUSE bug 998516</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7175</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7175" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7175" ref_url="https://www.suse.com/security/cve/CVE-2016-7175" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7175/">CVE-2016-7175</cve>
	<bugzilla href="https://bugzilla.suse.com/998099">SUSE bug 998099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998761">SUSE bug 998761</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7176</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7176" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7176" ref_url="https://www.suse.com/security/cve/CVE-2016-7176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7176/">CVE-2016-7176</cve>
	<bugzilla href="https://bugzilla.suse.com/998099">SUSE bug 998099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998762">SUSE bug 998762</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7177</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7177" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7177" ref_url="https://www.suse.com/security/cve/CVE-2016-7177" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of channels, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7177/">CVE-2016-7177</cve>
	<bugzilla href="https://bugzilla.suse.com/998099">SUSE bug 998099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998763">SUSE bug 998763</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7178</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7178" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7178" ref_url="https://www.suse.com/security/cve/CVE-2016-7178" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7178/">CVE-2016-7178</cve>
	<bugzilla href="https://bugzilla.suse.com/998099">SUSE bug 998099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998964">SUSE bug 998964</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7179</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7179" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7179" ref_url="https://www.suse.com/security/cve/CVE-2016-7179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7179/">CVE-2016-7179</cve>
	<bugzilla href="https://bugzilla.suse.com/998099">SUSE bug 998099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998963">SUSE bug 998963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7180</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7180" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7180" ref_url="https://www.suse.com/security/cve/CVE-2016-7180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7180/">CVE-2016-7180</cve>
	<bugzilla href="https://bugzilla.suse.com/998099">SUSE bug 998099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998800">SUSE bug 998800</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7415</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7415" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7415" ref_url="https://www.suse.com/security/cve/CVE-2016-7415" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7415/">CVE-2016-7415</cve>
	<bugzilla href="https://bugzilla.suse.com/999822">SUSE bug 999822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334242" comment="icu is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337112" comment="libicu-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625487" comment="libicu60_2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625488" comment="libicu60_2-bedata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625489" comment="libicu60_2-ledata is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337112" comment="libicu-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625487" comment="libicu60_2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625489" comment="libicu60_2-ledata is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7420</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7420" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7420" ref_url="https://www.suse.com/security/cve/CVE-2016-7420" source="SUSE CVE"/>
    <description>
    Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7420/">CVE-2016-7420</cve>
	<bugzilla href="https://bugzilla.suse.com/1008266">SUSE bug 1008266</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694220" comment="libcryptopp is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009683664" comment="libcryptopp-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009683665" comment="libcryptopp5_6_5 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7421</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7421" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7421" ref_url="https://www.suse.com/security/cve/CVE-2016-7421" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
    <description>
    The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit process IO loop to the ring size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7421/">CVE-2016-7421</cve>
	<bugzilla href="https://bugzilla.suse.com/999661">SUSE bug 999661</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7422</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7422" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7422" ref_url="https://www.suse.com/security/cve/CVE-2016-7422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7422/">CVE-2016-7422</cve>
	<bugzilla href="https://bugzilla.suse.com/1000346">SUSE bug 1000346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7423</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7423" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7423" ref_url="https://www.suse.com/security/cve/CVE-2016-7423" source="SUSE CVE"/>
    <description>
    The mptsas_process_scsi_io_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors involving MPTSASRequest objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7423/">CVE-2016-7423</cve>
	<bugzilla href="https://bugzilla.suse.com/1000397">SUSE bug 1000397</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7425</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7425" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7425" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7425" ref_url="https://www.suse.com/security/cve/CVE-2016-7425" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2976-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3069-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2583-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00013.html" source="SUSE-SU"/>
    <description>
    The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7425/">CVE-2016-7425</cve>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999932">SUSE bug 999932</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7426</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7426" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7426" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7426" ref_url="https://www.suse.com/security/cve/CVE-2016-7426" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002589.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3280-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html" source="SUSE-SU"/>
    <description>
    NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-7426/">CVE-2016-7426</cve>
	<bugzilla href="https://bugzilla.suse.com/1011406">SUSE bug 1011406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011421">SUSE bug 1011421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012330">SUSE bug 1012330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7427</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7427" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7427" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7427" ref_url="https://www.suse.com/security/cve/CVE-2016-7427" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002589.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3280-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html" source="SUSE-SU"/>
    <description>
    The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via a crafted broadcast mode packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-7427/">CVE-2016-7427</cve>
	<bugzilla href="https://bugzilla.suse.com/1011390">SUSE bug 1011390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011421">SUSE bug 1011421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012330">SUSE bug 1012330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7428</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7428" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7428" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7428" ref_url="https://www.suse.com/security/cve/CVE-2016-7428" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002589.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3280-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html" source="SUSE-SU"/>
    <description>
    ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the poll interval in a broadcast packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-7428/">CVE-2016-7428</cve>
	<bugzilla href="https://bugzilla.suse.com/1011417">SUSE bug 1011417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011421">SUSE bug 1011421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012330">SUSE bug 1012330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7429</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7429" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7429" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7429" ref_url="https://www.suse.com/security/cve/CVE-2016-7429" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002589.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3280-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html" source="SUSE-SU"/>
    <description>
    NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) by sending a response for a source to an interface the source does not use.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-7429/">CVE-2016-7429</cve>
	<bugzilla href="https://bugzilla.suse.com/1011404">SUSE bug 1011404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011421">SUSE bug 1011421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012330">SUSE bug 1012330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7431</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7431" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7431" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7431" ref_url="https://www.suse.com/security/cve/CVE-2016-7431" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002589.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3280-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html" source="SUSE-SU"/>
    <description>
    NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero.  NOTE: this vulnerability exists because of a CVE-2015-8138 regression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-7431/">CVE-2016-7431</cve>
	<bugzilla href="https://bugzilla.suse.com/1011395">SUSE bug 1011395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011421">SUSE bug 1011421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012330">SUSE bug 1012330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7433</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7433" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7433" ref_url="https://www.suse.com/security/cve/CVE-2016-7433" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002589.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3280-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html" source="SUSE-SU"/>
    <description>
    NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-7433/">CVE-2016-7433</cve>
	<bugzilla href="https://bugzilla.suse.com/1011411">SUSE bug 1011411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011421">SUSE bug 1011421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012330">SUSE bug 1012330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7434</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7434" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7434" ref_url="https://www.suse.com/security/cve/CVE-2016-7434" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002589.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3280-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html" source="SUSE-SU"/>
    <description>
    The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7434/">CVE-2016-7434</cve>
	<bugzilla href="https://bugzilla.suse.com/1011398">SUSE bug 1011398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011421">SUSE bug 1011421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012330">SUSE bug 1012330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7440</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7440" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7440" ref_url="https://www.suse.com/security/cve/CVE-2016-7440" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging cache-bank timing differences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7440/">CVE-2016-7440</cve>
	<bugzilla href="https://bugzilla.suse.com/1005581">SUSE bug 1005581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7445</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7445" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7445" ref_url="https://www.suse.com/security/cve/CVE-2016-7445" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2424-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-09/msg00109.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2568-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00104.html" source="SUSE-SU"/>
    <description>
    convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving the variable s.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7445/">CVE-2016-7445</cve>
	<bugzilla href="https://bugzilla.suse.com/1007739">SUSE bug 1007739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007744">SUSE bug 1007744</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015662">SUSE bug 1015662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/999817">SUSE bug 999817</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7466</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7466" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7466" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7466" ref_url="https://www.suse.com/security/cve/CVE-2016-7466" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, allows local guest OS administrators to cause a denial of service (memory consumption and possibly QEMU process crash) by repeatedly unplugging a USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7466/">CVE-2016-7466</cve>
	<bugzilla href="https://bugzilla.suse.com/1000345">SUSE bug 1000345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7545</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7545" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7545" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7545" ref_url="https://www.suse.com/security/cve/CVE-2016-7545" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002612.html" source="SUSE-SU"/>
    <description>
    SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7545/">CVE-2016-7545</cve>
	<bugzilla href="https://bugzilla.suse.com/1000998">SUSE bug 1000998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968375">SUSE bug 968375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/968674">SUSE bug 968674</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481623" comment="policycoreutils-2.8-9.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481624" comment="policycoreutils-lang-2.8-9.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481625" comment="policycoreutils-newrole-2.8-9.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481626" comment="python3-policycoreutils-2.8-9.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7567</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7567" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7567" ref_url="https://www.suse.com/security/cve/CVE-2016-7567" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003598.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2712-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7567/">CVE-2016-7567</cve>
	<bugzilla href="https://bugzilla.suse.com/1001600">SUSE bug 1001600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074356">SUSE bug 1074356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488405" comment="openslp-server-2.0.0-6.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481604" comment="openslp-2.0.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481605" comment="openslp-32bit-2.0.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481606" comment="openslp-devel-2.0.0-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7586</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7586" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7586" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7586" ref_url="https://www.suse.com/security/cve/CVE-2016-7586" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7586/">CVE-2016-7586</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7587</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7587" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7587" ref_url="https://www.suse.com/security/cve/CVE-2016-7587" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7587/">CVE-2016-7587</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7589</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7589" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7589" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7589" ref_url="https://www.suse.com/security/cve/CVE-2016-7589" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7589/">CVE-2016-7589</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7592</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7592" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7592" ref_url="https://www.suse.com/security/cve/CVE-2016-7592" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component, which allows remote attackers to obtain sensitive information via crafted JavaScript prompts on a web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7592/">CVE-2016-7592</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7598</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7598" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7598" ref_url="https://www.suse.com/security/cve/CVE-2016-7598" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7598/">CVE-2016-7598</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7599</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7599" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7599" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7599" ref_url="https://www.suse.com/security/cve/CVE-2016-7599" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site that uses HTTP redirects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7599/">CVE-2016-7599</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7610</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7610" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7610" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7610" ref_url="https://www.suse.com/security/cve/CVE-2016-7610" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7610/">CVE-2016-7610</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7623</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7623" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7623" ref_url="https://www.suse.com/security/cve/CVE-2016-7623" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a blob URL on a web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7623/">CVE-2016-7623</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7632</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7632" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7632" ref_url="https://www.suse.com/security/cve/CVE-2016-7632" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7632/">CVE-2016-7632</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7635</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7635" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7635" ref_url="https://www.suse.com/security/cve/CVE-2016-7635" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7635/">CVE-2016-7635</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7639</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7639" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7639" ref_url="https://www.suse.com/security/cve/CVE-2016-7639" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7639/">CVE-2016-7639</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7641</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7641" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7641" ref_url="https://www.suse.com/security/cve/CVE-2016-7641" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7641/">CVE-2016-7641</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7645</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7645" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7645" ref_url="https://www.suse.com/security/cve/CVE-2016-7645" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7645/">CVE-2016-7645</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7652</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7652" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7652" ref_url="https://www.suse.com/security/cve/CVE-2016-7652" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7652/">CVE-2016-7652</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7654</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7654" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7654" ref_url="https://www.suse.com/security/cve/CVE-2016-7654" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7654/">CVE-2016-7654</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167656" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7656</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7656" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7656" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7656" ref_url="https://www.suse.com/security/cve/CVE-2016-7656" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7656/">CVE-2016-7656</cve>
	<bugzilla href="https://bugzilla.suse.com/1020950">SUSE bug 1020950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7777</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7777" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7777" ref_url="https://www.suse.com/security/cve/CVE-2016-7777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-7777/">CVE-2016-7777</cve>
	<bugzilla href="https://bugzilla.suse.com/1000106">SUSE bug 1000106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7837</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7837" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7837" ref_url="https://www.suse.com/security/cve/CVE-2016-7837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005161.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2810-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00069.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7837/">CVE-2016-7837</cve>
	<bugzilla href="https://bugzilla.suse.com/1026652">SUSE bug 1026652</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334185" comment="bluez is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336475" comment="bluez-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336474" comment="libbluetooth3 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7907</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7907" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7907" ref_url="https://www.suse.com/security/cve/CVE-2016-7907" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7907/">CVE-2016-7907</cve>
	<bugzilla href="https://bugzilla.suse.com/1002549">SUSE bug 1002549</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7908</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7908" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7908" ref_url="https://www.suse.com/security/cve/CVE-2016-7908" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7908/">CVE-2016-7908</cve>
	<bugzilla href="https://bugzilla.suse.com/1002550">SUSE bug 1002550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1003030">SUSE bug 1003030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167909" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7909</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7909" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7909" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7909" ref_url="https://www.suse.com/security/cve/CVE-2016-7909" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7909/">CVE-2016-7909</cve>
	<bugzilla href="https://bugzilla.suse.com/1002557">SUSE bug 1002557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1003032">SUSE bug 1003032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7910</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7910" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7910" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7910" ref_url="https://www.suse.com/security/cve/CVE-2016-7910" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privileges by leveraging the execution of a certain stop operation even if the corresponding start operation had failed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7910/">CVE-2016-7910</cve>
	<bugzilla href="https://bugzilla.suse.com/1010716">SUSE bug 1010716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196722">SUSE bug 1196722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7913</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7913" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7913" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7913" ref_url="https://www.suse.com/security/cve/CVE-2016-7913" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7913/">CVE-2016-7913</cve>
	<bugzilla href="https://bugzilla.suse.com/1010478">SUSE bug 1010478</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167916" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7916</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7916" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7916" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7916" ref_url="https://www.suse.com/security/cve/CVE-2016-7916" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7916/">CVE-2016-7916</cve>
	<bugzilla href="https://bugzilla.suse.com/1010467">SUSE bug 1010467</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7922</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7922" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7922" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7922" ref_url="https://www.suse.com/security/cve/CVE-2016-7922" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7922/">CVE-2016-7922</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7923</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7923" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7923" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7923" ref_url="https://www.suse.com/security/cve/CVE-2016-7923" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7923/">CVE-2016-7923</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167924" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7924</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7924" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7924" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7924" ref_url="https://www.suse.com/security/cve/CVE-2016-7924" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7924/">CVE-2016-7924</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167925" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7925</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7925" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7925" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7925" ref_url="https://www.suse.com/security/cve/CVE-2016-7925" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7925/">CVE-2016-7925</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167926" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7926</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7926" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7926" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7926" ref_url="https://www.suse.com/security/cve/CVE-2016-7926" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7926/">CVE-2016-7926</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167927" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7927</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7927" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7927" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7927" ref_url="https://www.suse.com/security/cve/CVE-2016-7927" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7927/">CVE-2016-7927</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7928</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7928" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7928" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7928" ref_url="https://www.suse.com/security/cve/CVE-2016-7928" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7928/">CVE-2016-7928</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167929" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7929</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7929" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7929" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7929" ref_url="https://www.suse.com/security/cve/CVE-2016-7929" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7929/">CVE-2016-7929</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167930" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7930</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7930" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7930" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7930" ref_url="https://www.suse.com/security/cve/CVE-2016-7930" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7930/">CVE-2016-7930</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7931</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7931" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7931" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7931" ref_url="https://www.suse.com/security/cve/CVE-2016-7931" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7931/">CVE-2016-7931</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167932" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7932</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7932" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7932" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7932" ref_url="https://www.suse.com/security/cve/CVE-2016-7932" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7932/">CVE-2016-7932</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7933</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7933" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7933" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7933" ref_url="https://www.suse.com/security/cve/CVE-2016-7933" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7933/">CVE-2016-7933</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7934</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7934" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7934" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7934" ref_url="https://www.suse.com/security/cve/CVE-2016-7934" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7934/">CVE-2016-7934</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7935</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7935" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7935" ref_url="https://www.suse.com/security/cve/CVE-2016-7935" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7935/">CVE-2016-7935</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7936</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7936" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7936" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7936" ref_url="https://www.suse.com/security/cve/CVE-2016-7936" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7936/">CVE-2016-7936</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7937</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7937" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7937" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7937" ref_url="https://www.suse.com/security/cve/CVE-2016-7937" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7937/">CVE-2016-7937</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7938</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7938" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7938" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7938" ref_url="https://www.suse.com/security/cve/CVE-2016-7938" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7938/">CVE-2016-7938</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7939</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7939" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7939" ref_url="https://www.suse.com/security/cve/CVE-2016-7939" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7939/">CVE-2016-7939</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167940" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7940</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7940" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7940" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7940" ref_url="https://www.suse.com/security/cve/CVE-2016-7940" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7940/">CVE-2016-7940</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7947</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7947" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7947" ref_url="https://www.suse.com/security/cve/CVE-2016-7947" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002495.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2600-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00048.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7947/">CVE-2016-7947</cve>
	<bugzilla href="https://bugzilla.suse.com/1003000">SUSE bug 1003000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159415">SUSE bug 1159415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482757" comment="libXrandr2-32bit-1.5.1-2.17 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480430" comment="libXrandr-devel-1.5.1-2.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480431" comment="libXrandr2-1.5.1-2.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7948</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7948" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7948" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7948" ref_url="https://www.suse.com/security/cve/CVE-2016-7948" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002495.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2600-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00048.html" source="SUSE-SU"/>
    <description>
    X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7948/">CVE-2016-7948</cve>
	<bugzilla href="https://bugzilla.suse.com/1003000">SUSE bug 1003000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159415">SUSE bug 1159415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482757" comment="libXrandr2-32bit-1.5.1-2.17 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480430" comment="libXrandr-devel-1.5.1-2.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480431" comment="libXrandr2-1.5.1-2.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7954</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7954" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7954" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7954" ref_url="https://www.suse.com/security/cve/CVE-2016-7954" source="SUSE CVE"/>
    <description>
    Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source.  NOTE: this might overlap CVE-2013-0334.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-7954/">CVE-2016-7954</cve>
	<bugzilla href="https://bugzilla.suse.com/1003063">SUSE bug 1003063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655540" comment="ruby2.5-rubygem-bundler is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7969</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7969" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7969" ref_url="https://www.suse.com/security/cve/CVE-2016-7969" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002475.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3087-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00068.html" source="SUSE-SU"/>
    <description>
    The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to "0/3 line wrapping equalization."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7969/">CVE-2016-7969</cve>
	<bugzilla href="https://bugzilla.suse.com/1002982">SUSE bug 1002982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482760" comment="libass-devel-0.14.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482761" comment="libass9-0.14.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7970</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7970" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7970" ref_url="https://www.suse.com/security/cve/CVE-2016-7970" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002475.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7970/">CVE-2016-7970</cve>
	<bugzilla href="https://bugzilla.suse.com/1002982">SUSE bug 1002982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482760" comment="libass-devel-0.14.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482761" comment="libass9-0.14.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7972</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7972" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7972" ref_url="https://www.suse.com/security/cve/CVE-2016-7972" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002475.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3087-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00068.html" source="SUSE-SU"/>
    <description>
    The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7972/">CVE-2016-7972</cve>
	<bugzilla href="https://bugzilla.suse.com/1002982">SUSE bug 1002982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482760" comment="libass-devel-0.14.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482761" comment="libass9-0.14.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7973</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7973" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7973" ref_url="https://www.suse.com/security/cve/CVE-2016-7973" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7973/">CVE-2016-7973</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7974</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7974" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7974" ref_url="https://www.suse.com/security/cve/CVE-2016-7974" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7974/">CVE-2016-7974</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7975</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7975" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7975" ref_url="https://www.suse.com/security/cve/CVE-2016-7975" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7975/">CVE-2016-7975</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7976</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7976" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7976" ref_url="https://www.suse.com/security/cve/CVE-2016-7976" source="SUSE CVE"/>
    <description>
    The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7976/">CVE-2016-7976</cve>
	<bugzilla href="https://bugzilla.suse.com/1001951">SUSE bug 1001951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004237">SUSE bug 1004237</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7977</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7977" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7977" ref_url="https://www.suse.com/security/cve/CVE-2016-7977" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00019.html" source="SUSE-SU"/>
    <description>
    Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7977/">CVE-2016-7977</cve>
	<bugzilla href="https://bugzilla.suse.com/1001951">SUSE bug 1001951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004237">SUSE bug 1004237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095610">SUSE bug 1095610</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7978</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7978" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7978" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7978" ref_url="https://www.suse.com/security/cve/CVE-2016-7978" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2492-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2648-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00062.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7978/">CVE-2016-7978</cve>
	<bugzilla href="https://bugzilla.suse.com/1001951">SUSE bug 1001951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004237">SUSE bug 1004237</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7979</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7979" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7979" ref_url="https://www.suse.com/security/cve/CVE-2016-7979" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2492-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2493-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2648-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00062.html" source="SUSE-SU"/>
    <description>
    Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7979/">CVE-2016-7979</cve>
	<bugzilla href="https://bugzilla.suse.com/1001951">SUSE bug 1001951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004237">SUSE bug 1004237</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7983</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7983" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7983" ref_url="https://www.suse.com/security/cve/CVE-2016-7983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7983/">CVE-2016-7983</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7984</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7984" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7984" ref_url="https://www.suse.com/security/cve/CVE-2016-7984" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7984/">CVE-2016-7984</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7985</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7985" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7985" ref_url="https://www.suse.com/security/cve/CVE-2016-7985" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7985/">CVE-2016-7985</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7986</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7986" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7986" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7986" ref_url="https://www.suse.com/security/cve/CVE-2016-7986" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7986/">CVE-2016-7986</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7992</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7992" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7992" ref_url="https://www.suse.com/security/cve/CVE-2016-7992" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cip_if_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7992/">CVE-2016-7992</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7993</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7993" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7993" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7993" ref_url="https://www.suse.com/security/cve/CVE-2016-7993" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    A bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7993/">CVE-2016-7993</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7994</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7994" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7994" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7994" ref_url="https://www.suse.com/security/cve/CVE-2016-7994" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_CREATE_2D commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7994/">CVE-2016-7994</cve>
	<bugzilla href="https://bugzilla.suse.com/1003613">SUSE bug 1003613</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7995</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-7995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7995" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-7995" ref_url="https://www.suse.com/security/cve/CVE-2016-7995" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of crafted buffer page select (PG) indexes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7995/">CVE-2016-7995</cve>
	<bugzilla href="https://bugzilla.suse.com/1003612">SUSE bug 1003612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1003870">SUSE bug 1003870</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8283</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8283" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8283" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8283" ref_url="https://www.suse.com/security/cve/CVE-2016-8283" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2932-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8283/">CVE-2016-8283</cve>
	<bugzilla href="https://bugzilla.suse.com/1005582">SUSE bug 1005582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1008318">SUSE bug 1008318</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8332</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8332" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8332" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8332" ref_url="https://www.suse.com/security/cve/CVE-2016-8332" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0155-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0185-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2567-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00082.html" source="SUSE-SU"/>
    <description>
    A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful attack, the target user needs to open a malicious jpeg2000 file. The jpeg2000 image file format is mostly used for embedding images inside PDF documents and the OpenJpeg library is used by a number of popular PDF renderers making PDF documents a likely attack vector.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8332/">CVE-2016-8332</cve>
	<bugzilla href="https://bugzilla.suse.com/1002414">SUSE bug 1002414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007739">SUSE bug 1007739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007744">SUSE bug 1007744</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015662">SUSE bug 1015662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8568</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8568" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8568" ref_url="https://www.suse.com/security/cve/CVE-2016-8568" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002435.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3097-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0184-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00103.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0195-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00114.html" source="SUSE-SU"/>
    <description>
    The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8568/">CVE-2016-8568</cve>
	<bugzilla href="https://bugzilla.suse.com/1003810">SUSE bug 1003810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1019036">SUSE bug 1019036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1019037">SUSE bug 1019037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487772" comment="libgit2-26-0.26.8-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487773" comment="libgit2-devel-0.26.8-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8569</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8569" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8569" ref_url="https://www.suse.com/security/cve/CVE-2016-8569" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002435.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3097-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0184-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00103.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0195-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00110.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00114.html" source="SUSE-SU"/>
    <description>
    The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8569/">CVE-2016-8569</cve>
	<bugzilla href="https://bugzilla.suse.com/1003810">SUSE bug 1003810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1019036">SUSE bug 1019036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1019037">SUSE bug 1019037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487772" comment="libgit2-26-0.26.8-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487773" comment="libgit2-devel-0.26.8-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8574</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8574" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8574" ref_url="https://www.suse.com/security/cve/CVE-2016-8574" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8574/">CVE-2016-8574</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8575</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8575" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8575" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8575" ref_url="https://www.suse.com/security/cve/CVE-2016-8575" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2017-5482.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8575/">CVE-2016-8575</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8576</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8576" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8576" ref_url="https://www.suse.com/security/cve/CVE-2016-8576" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8576/">CVE-2016-8576</cve>
	<bugzilla href="https://bugzilla.suse.com/1003878">SUSE bug 1003878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004016">SUSE bug 1004016</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8577</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8577" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8577" ref_url="https://www.suse.com/security/cve/CVE-2016-8577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Memory leak in the v9fs_read function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors related to an I/O read operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8577/">CVE-2016-8577</cve>
	<bugzilla href="https://bugzilla.suse.com/1003893">SUSE bug 1003893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004021">SUSE bug 1004021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8578</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8578" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8578" ref_url="https://www.suse.com/security/cve/CVE-2016-8578" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) by sending an empty string parameter to a 9P operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8578/">CVE-2016-8578</cve>
	<bugzilla href="https://bugzilla.suse.com/1003894">SUSE bug 1003894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004023">SUSE bug 1004023</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8602</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8602" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8602" ref_url="https://www.suse.com/security/cve/CVE-2016-8602" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2654-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-October/002366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002392.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2648-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2710-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00003.html" source="SUSE-SU"/>
    <description>
    The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8602/">CVE-2016-8602</cve>
	<bugzilla href="https://bugzilla.suse.com/1001951">SUSE bug 1001951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1004237">SUSE bug 1004237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036453">SUSE bug 1036453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8605</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8605" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8605" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8605" ref_url="https://www.suse.com/security/cve/CVE-2016-8605" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0398-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002624.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1659-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006973.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2643-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2645-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0482-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2023:0137-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ROLJCNPWZ2G4IQWP7NQKXNBT2QR32K2A/" source="SUSE-SU"/>
    <description>
    The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode argument would create directories as 0777. This is fixed in Guile 2.0.13. Prior versions are affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-8605/">CVE-2016-8605</cve>
	<bugzilla href="https://bugzilla.suse.com/1004221">SUSE bug 1004221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487763" comment="guile-2.0.14-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487764" comment="guile-devel-2.0.14-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487765" comment="guile-modules-2_0-2.0.14-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487766" comment="libguile-2_0-22-2.0.14-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487767" comment="libguilereadline-v-18-18-2.0.14-5.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168606" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8606</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8606" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8606" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8606" ref_url="https://www.suse.com/security/cve/CVE-2016-8606" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2645-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-10/msg00098.html" source="SUSE-SU"/>
    <description>
    The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8606/">CVE-2016-8606</cve>
	<bugzilla href="https://bugzilla.suse.com/1004226">SUSE bug 1004226</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487763" comment="guile-2.0.14-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487764" comment="guile-devel-2.0.14-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487765" comment="guile-modules-2_0-2.0.14-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487766" comment="libguile-2_0-22-2.0.14-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487767" comment="libguilereadline-v-18-18-2.0.14-5.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8610</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8610" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8610" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8610" ref_url="https://www.suse.com/security/cve/CVE-2016-8610" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002670.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004873.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3864-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3964-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183964-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3994-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004924.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4274-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/005002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005586.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0487-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4104-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00026.html" source="SUSE-SU"/>
    <description>
    A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8610/">CVE-2016-8610</cve>
	<bugzilla href="https://bugzilla.suse.com/1005878">SUSE bug 1005878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005879">SUSE bug 1005879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110018">SUSE bug 1110018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120592">SUSE bug 1120592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148697">SUSE bug 1148697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/982575">SUSE bug 982575</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481164" comment="gnutls-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481165" comment="libgnutls-devel-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481166" comment="libgnutls30-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481167" comment="libgnutls30-32bit-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481168" comment="libgnutlsxx-devel-3.6.7-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481169" comment="libgnutlsxx28-3.6.7-6.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8615</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8615" ref_url="https://www.suse.com/security/cve/CVE-2016-8615" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-8615/">CVE-2016-8615</cve>
	<bugzilla href="https://bugzilla.suse.com/1005633">SUSE bug 1005633</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8616</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8616" ref_url="https://www.suse.com/security/cve/CVE-2016-8616" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existing connections. This means that if an unused connection with proper credentials exists for a protocol that has connection-scoped credentials, an attacker can cause that connection to be reused if s/he knows the case-insensitive version of the correct password.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-8616/">CVE-2016-8616</cve>
	<bugzilla href="https://bugzilla.suse.com/1005634">SUSE bug 1005634</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168617" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8617</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8617" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8617" ref_url="https://www.suse.com/security/cve/CVE-2016-8617" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8617/">CVE-2016-8617</cve>
	<bugzilla href="https://bugzilla.suse.com/1005635">SUSE bug 1005635</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8618</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8618" ref_url="https://www.suse.com/security/cve/CVE-2016-8618" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-8618/">CVE-2016-8618</cve>
	<bugzilla href="https://bugzilla.suse.com/1005637">SUSE bug 1005637</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8619</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8619" ref_url="https://www.suse.com/security/cve/CVE-2016-8619" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8619/">CVE-2016-8619</cve>
	<bugzilla href="https://bugzilla.suse.com/1005638">SUSE bug 1005638</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8620</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8620" ref_url="https://www.suse.com/security/cve/CVE-2016-8620" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8620/">CVE-2016-8620</cve>
	<bugzilla href="https://bugzilla.suse.com/1005640">SUSE bug 1005640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8621</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8621" ref_url="https://www.suse.com/security/cve/CVE-2016-8621" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-8621/">CVE-2016-8621</cve>
	<bugzilla href="https://bugzilla.suse.com/1005642">SUSE bug 1005642</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8622</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8622" ref_url="https://www.suse.com/security/cve/CVE-2016-8622" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8622/">CVE-2016-8622</cve>
	<bugzilla href="https://bugzilla.suse.com/1005643">SUSE bug 1005643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8623</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8623" ref_url="https://www.suse.com/security/cve/CVE-2016-8623" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-after-free leading to information disclosure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-8623/">CVE-2016-8623</cve>
	<bugzilla href="https://bugzilla.suse.com/1005645">SUSE bug 1005645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8624</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8624" ref_url="https://www.suse.com/security/cve/CVE-2016-8624" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00020.html" source="SUSE-SU"/>
    <description>
    curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into connecting to a different host. This may have security implications if you for example use an URL parser that follows the RFC to check for allowed domains before using curl to request them.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-8624/">CVE-2016-8624</cve>
	<bugzilla href="https://bugzilla.suse.com/1005646">SUSE bug 1005646</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8625</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8625" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8625" ref_url="https://www.suse.com/security/cve/CVE-2016-8625" source="SUSE CVE"/>
    <description>
    curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-8625/">CVE-2016-8625</cve>
	<bugzilla href="https://bugzilla.suse.com/1005649">SUSE bug 1005649</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8630</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8630" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8630" ref_url="https://www.suse.com/security/cve/CVE-2016-8630" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00027.html" source="SUSE-SU"/>
    <description>
    The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service (host OS crash) via a certain use of a ModR/M byte in an undefined instruction.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8630/">CVE-2016-8630</cve>
	<bugzilla href="https://bugzilla.suse.com/1009222">SUSE bug 1009222</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8632</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8632" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8632" ref_url="https://www.suse.com/security/cve/CVE-2016-8632" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3049-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0227-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00034.html" source="SUSE-SU"/>
    <description>
    The tipc_msg_build function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not validate the relationship between the minimum fragment length and the maximum packet size, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-31"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8632/">CVE-2016-8632</cve>
	<bugzilla href="https://bugzilla.suse.com/1008831">SUSE bug 1008831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012852">SUSE bug 1012852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8633</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8633" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8633" ref_url="https://www.suse.com/security/cve/CVE-2016-8633" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8633/">CVE-2016-8633</cve>
	<bugzilla href="https://bugzilla.suse.com/1008833">SUSE bug 1008833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8637</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8637" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8637" ref_url="https://www.suse.com/security/cve/CVE-2016-8637" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0641-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003286.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0708-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00047.html" source="SUSE-SU"/>
    <description>
    A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'early cpio' is used, such as when including microcode updates. Local attacker can use this to obtain sensitive information from these files, such as encryption keys or credentials.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-8637/">CVE-2016-8637</cve>
	<bugzilla href="https://bugzilla.suse.com/1008340">SUSE bug 1008340</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694233" comment="dracut is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481099" comment="dracut-044.2-18.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481100" comment="dracut-fips-044.2-18.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481101" comment="dracut-ima-044.2-18.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8645</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8645" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8645" ref_url="https://www.suse.com/security/cve/CVE-2016-8645" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0456-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00022.html" source="SUSE-SU"/>
    <description>
    The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service (system crash) via a crafted application that makes sendto system calls, related to net/ipv4/tcp_ipv4.c and net/ipv6/tcp_ipv6.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8645/">CVE-2016-8645</cve>
	<bugzilla href="https://bugzilla.suse.com/1009969">SUSE bug 1009969</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8646</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8646" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8646" ref_url="https://www.suse.com/security/cve/CVE-2016-8646" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00029.html" source="SUSE-SU"/>
    <description>
    The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service (OOPS) by attempting to trigger use of in-kernel hash algorithms for a socket that has received zero bytes of data.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8646/">CVE-2016-8646</cve>
	<bugzilla href="https://bugzilla.suse.com/1010150">SUSE bug 1010150</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8650</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8650" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8650" ref_url="https://www.suse.com/security/cve/CVE-2016-8650" source="SUSE CVE"/>
    <description>
    The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8650/">CVE-2016-8650</cve>
	<bugzilla href="https://bugzilla.suse.com/1011820">SUSE bug 1011820</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8654</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8654" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8654" ref_url="https://www.suse.com/security/cve/CVE-2016-8654" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" source="SUSE-SU"/>
    <description>
    A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8654/">CVE-2016-8654</cve>
	<bugzilla href="https://bugzilla.suse.com/1012530">SUSE bug 1012530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8655</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8655" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8655" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8655" ref_url="https://www.suse.com/security/cve/CVE-2016-8655" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3049-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3096-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3104-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3116-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3197-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="TID7018348" ref_url="https://www.suse.com/support/kb/doc/?id=7018348" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00034.html" source="SUSE-SU"/>
    <description>
    Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-01-19"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8655/">CVE-2016-8655</cve>
	<bugzilla href="https://bugzilla.suse.com/1012754">SUSE bug 1012754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012759">SUSE bug 1012759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013822">SUSE bug 1013822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052365">SUSE bug 1052365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8658</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8658" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8658" ref_url="https://www.suse.com/security/cve/CVE-2016-8658" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2583-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00013.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the brcmf_cfg80211_start_ap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.7.5 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a long SSID Information Element in a command to a Netlink socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-8658/">CVE-2016-8658</cve>
	<bugzilla href="https://bugzilla.suse.com/1004462">SUSE bug 1004462</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8659</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8659" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8659" ref_url="https://www.suse.com/security/cve/CVE-2016-8659" source="SUSE CVE"/>
    <description>
    Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8659/">CVE-2016-8659</cve>
	<bugzilla href="https://bugzilla.suse.com/984817">SUSE bug 984817</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486599" comment="flatpak-1.2.3-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486600" comment="flatpak-devel-1.2.3-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486601" comment="flatpak-zsh-completion-1.2.3-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486602" comment="libflatpak0-1.2.3-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486603" comment="typelib-1_0-Flatpak-1_0-1.2.3-2.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8667</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8667" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8667" ref_url="https://www.suse.com/security/cve/CVE-2016-8667" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8667/">CVE-2016-8667</cve>
	<bugzilla href="https://bugzilla.suse.com/1004702">SUSE bug 1004702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005004">SUSE bug 1005004</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8668</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8668" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8668" ref_url="https://www.suse.com/security/cve/CVE-2016-8668" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8668/">CVE-2016-8668</cve>
	<bugzilla href="https://bugzilla.suse.com/1004706">SUSE bug 1004706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8669</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8669" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8669" ref_url="https://www.suse.com/security/cve/CVE-2016-8669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8669/">CVE-2016-8669</cve>
	<bugzilla href="https://bugzilla.suse.com/1004707">SUSE bug 1004707</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005005">SUSE bug 1005005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8685</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8685" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8685" ref_url="https://www.suse.com/security/cve/CVE-2016-8685" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0648-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00015.html" source="SUSE-SU"/>
    <description>
    The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8685/">CVE-2016-8685</cve>
	<bugzilla href="https://bugzilla.suse.com/1005026">SUSE bug 1005026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005027">SUSE bug 1005027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486490" comment="libpotrace0-1.15-3.19 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8686</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8686" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8686" ref_url="https://www.suse.com/security/cve/CVE-2016-8686" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0648-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00015.html" source="SUSE-SU"/>
    <description>
    The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8686/">CVE-2016-8686</cve>
	<bugzilla href="https://bugzilla.suse.com/1005026">SUSE bug 1005026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1005027">SUSE bug 1005027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486490" comment="libpotrace0-1.15-3.19 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8687</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8687" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8687" ref_url="https://www.suse.com/security/cve/CVE-2016-8687" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006190.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the safe_fprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8687/">CVE-2016-8687</cve>
	<bugzilla href="https://bugzilla.suse.com/1005070">SUSE bug 1005070</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8688</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8688" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8688" ref_url="https://www.suse.com/security/cve/CVE-2016-8688" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service (crash) via a crafted file, which triggers an invalid read in the (1) detect_form or (2) bid_entry function in libarchive/archive_read_support_format_mtree.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8688/">CVE-2016-8688</cve>
	<bugzilla href="https://bugzilla.suse.com/1005076">SUSE bug 1005076</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8689</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8689" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8689" ref_url="https://www.suse.com/security/cve/CVE-2016-8689" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002421.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3005-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00030.html" source="SUSE-SU"/>
    <description>
    The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out-of-bounds read) via multiple EmptyStream attributes in a header in a 7zip archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8689/">CVE-2016-8689</cve>
	<bugzilla href="https://bugzilla.suse.com/1005072">SUSE bug 1005072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8690</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8690" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8690" ref_url="https://www.suse.com/security/cve/CVE-2016-8690" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8690/">CVE-2016-8690</cve>
	<bugzilla href="https://bugzilla.suse.com/1005084">SUSE bug 1005084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007009">SUSE bug 1007009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8691</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8691" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8691" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8691" ref_url="https://www.suse.com/security/cve/CVE-2016-8691" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8691/">CVE-2016-8691</cve>
	<bugzilla href="https://bugzilla.suse.com/1005090">SUSE bug 1005090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8692</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8692" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8692" ref_url="https://www.suse.com/security/cve/CVE-2016-8692" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8692/">CVE-2016-8692</cve>
	<bugzilla href="https://bugzilla.suse.com/1005090">SUSE bug 1005090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8693</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8693" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8693" ref_url="https://www.suse.com/security/cve/CVE-2016-8693" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8693/">CVE-2016-8693</cve>
	<bugzilla href="https://bugzilla.suse.com/1005242">SUSE bug 1005242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8704</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8704" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8704" ref_url="https://www.suse.com/security/cve/CVE-2016-8704" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2839-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2841-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00072.html" source="SUSE-SU"/>
    <description>
    An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8704/">CVE-2016-8704</cve>
	<bugzilla href="https://bugzilla.suse.com/1007719">SUSE bug 1007719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007866">SUSE bug 1007866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007871">SUSE bug 1007871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488250" comment="memcached-1.5.6-2.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488251" comment="memcached-devel-1.5.6-2.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8705</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8705" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8705" ref_url="https://www.suse.com/security/cve/CVE-2016-8705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004166.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2839-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2841-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00072.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8705/">CVE-2016-8705</cve>
	<bugzilla href="https://bugzilla.suse.com/1007866">SUSE bug 1007866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007870">SUSE bug 1007870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056865">SUSE bug 1056865</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488250" comment="memcached-1.5.6-2.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488251" comment="memcached-devel-1.5.6-2.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8706</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8706" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8706" ref_url="https://www.suse.com/security/cve/CVE-2016-8706" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2839-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2841-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00072.html" source="SUSE-SU"/>
    <description>
    An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8706/">CVE-2016-8706</cve>
	<bugzilla href="https://bugzilla.suse.com/1007866">SUSE bug 1007866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007869">SUSE bug 1007869</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488250" comment="memcached-1.5.6-2.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488251" comment="memcached-devel-1.5.6-2.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8734</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8734" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8734" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8734" ref_url="https://www.suse.com/security/cve/CVE-2016-8734" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2163-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3073-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00061.html" source="SUSE-SU"/>
    <description>
    Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8734/">CVE-2016-8734</cve>
	<bugzilla href="https://bugzilla.suse.com/1011552">SUSE bug 1011552</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481657" comment="subversion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481658" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8740</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8740" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8740" ref_url="https://www.suse.com/security/cve/CVE-2016-8740" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0203-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002567.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0297-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00149.html" source="SUSE-SU"/>
    <description>
    The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to cause a denial of service (memory consumption) via crafted CONTINUATION frames in an HTTP/2 request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8740/">CVE-2016-8740</cve>
	<bugzilla href="https://bugzilla.suse.com/1013648">SUSE bug 1013648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8743</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8743" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8743" ref_url="https://www.suse.com/security/cve/CVE-2016-8743" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004509.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004583.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2815-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004718.html" source="SUSE-SU"/>
		<reference ref_id="TID7018735" ref_url="https://www.suse.com/support/kb/doc/?id=7018735" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0897-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0903-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00076.html" source="SUSE-SU"/>
    <description>
    Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-8743/">CVE-2016-8743</cve>
	<bugzilla href="https://bugzilla.suse.com/1016715">SUSE bug 1016715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033513">SUSE bug 1033513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086774">SUSE bug 1086774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104826">SUSE bug 1104826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930944">SUSE bug 930944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488303" comment="apache2-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488304" comment="apache2-devel-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488305" comment="apache2-doc-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488306" comment="apache2-prefork-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488307" comment="apache2-utils-2.4.33-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488308" comment="apache2-worker-2.4.33-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8858</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8858" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8858" ref_url="https://www.suse.com/security/cve/CVE-2016-8858" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002677.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002685.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0607-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002687.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002972.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00178.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0674-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00032.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests.  NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8858/">CVE-2016-8858</cve>
	<bugzilla href="https://bugzilla.suse.com/1005480">SUSE bug 1005480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488406" comment="openssh-fips-7.9p1-4.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481607" comment="openssh-7.9p1-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481608" comment="openssh-helpers-7.9p1-4.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8864</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8864" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8864" ref_url="https://www.suse.com/security/cve/CVE-2016-8864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2696-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2697-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2706-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="TID7018224" ref_url="https://www.suse.com/support/kb/doc/?id=7018224" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2739-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00017.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8864/">CVE-2016-8864</cve>
	<bugzilla href="https://bugzilla.suse.com/1007829">SUSE bug 1007829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020526">SUSE bug 1020526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8867</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8867" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8867" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8867" ref_url="https://www.suse.com/security/cve/CVE-2016-8867" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002467.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3009-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00033.html" source="SUSE-SU"/>
    <description>
    Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-25"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-8867/">CVE-2016-8867</cve>
	<bugzilla href="https://bugzilla.suse.com/1007249">SUSE bug 1007249</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168880" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8880</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8880" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8880" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8880" ref_url="https://www.suse.com/security/cve/CVE-2016-8880" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4516. Reason: This candidate is a duplicate of CVE-2011-4516. Notes: All CVE users should reference CVE-2011-4516 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-8880/">CVE-2016-8880</cve>
	<bugzilla href="https://bugzilla.suse.com/1006591">SUSE bug 1006591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8881</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8881" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8881" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8881" ref_url="https://www.suse.com/security/cve/CVE-2016-8881" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4517. Reason: This candidate is a duplicate of CVE-2011-4517. Notes: All CVE users should reference CVE-2011-4517 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-8881/">CVE-2016-8881</cve>
	<bugzilla href="https://bugzilla.suse.com/1006593">SUSE bug 1006593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168882" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8882</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8882" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8882" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8882" ref_url="https://www.suse.com/security/cve/CVE-2016-8882" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8882/">CVE-2016-8882</cve>
	<bugzilla href="https://bugzilla.suse.com/1006597">SUSE bug 1006597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168883" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8883</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8883" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8883" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8883" ref_url="https://www.suse.com/security/cve/CVE-2016-8883" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8883/">CVE-2016-8883</cve>
	<bugzilla href="https://bugzilla.suse.com/1006598">SUSE bug 1006598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8884</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8884" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8884" ref_url="https://www.suse.com/security/cve/CVE-2016-8884" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8884/">CVE-2016-8884</cve>
	<bugzilla href="https://bugzilla.suse.com/1005084">SUSE bug 1005084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007009">SUSE bug 1007009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8885</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8885" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8885" ref_url="https://www.suse.com/security/cve/CVE-2016-8885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8885/">CVE-2016-8885</cve>
	<bugzilla href="https://bugzilla.suse.com/1005084">SUSE bug 1005084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007009">SUSE bug 1007009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168886" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8886</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8886" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8886" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8886" ref_url="https://www.suse.com/security/cve/CVE-2016-8886" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8886/">CVE-2016-8886</cve>
	<bugzilla href="https://bugzilla.suse.com/1006599">SUSE bug 1006599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168887" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8887</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8887" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8887" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8887" ref_url="https://www.suse.com/security/cve/CVE-2016-8887" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8887/">CVE-2016-8887</cve>
	<bugzilla href="https://bugzilla.suse.com/1006836">SUSE bug 1006836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1006839">SUSE bug 1006839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168909" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8909</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8909" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8909" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8909" ref_url="https://www.suse.com/security/cve/CVE-2016-8909" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8909/">CVE-2016-8909</cve>
	<bugzilla href="https://bugzilla.suse.com/1006536">SUSE bug 1006536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007160">SUSE bug 1007160</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8910</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-8910" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8910" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-8910" ref_url="https://www.suse.com/security/cve/CVE-2016-8910" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8910/">CVE-2016-8910</cve>
	<bugzilla href="https://bugzilla.suse.com/1006538">SUSE bug 1006538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1007157">SUSE bug 1007157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024178">SUSE bug 1024178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9015</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9015" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9015" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9015" ref_url="https://www.suse.com/security/cve/CVE-2016-9015" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0159-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middle and information leakage attacks. This vulnerability affects users using versions 1.17 and 1.18 of the urllib3 library, who are using the optional PyOpenSSL support for TLS instead of the regular standard library TLS backend, and who are using OpenSSL 1.1.0 via PyOpenSSL. This is an extremely uncommon configuration, so the security impact of this vulnerability is low.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9015/">CVE-2016-9015</cve>
	<bugzilla href="https://bugzilla.suse.com/1023502">SUSE bug 1023502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024540">SUSE bug 1024540</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347773" comment="python2-urllib3 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481647" comment="python3-urllib3-1.24-7.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009347773" comment="python2-urllib3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335439" comment="python3-urllib3 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9042</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9042" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9042" ref_url="https://www.suse.com/security/cve/CVE-2016-9042" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002813.html" source="SUSE-SU"/>
    <description>
    An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9042/">CVE-2016-9042</cve>
	<bugzilla href="https://bugzilla.suse.com/1030050">SUSE bug 1030050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038049">SUSE bug 1038049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044525">SUSE bug 1044525</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9061</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9061" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9061" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9061" ref_url="https://www.suse.com/security/cve/CVE-2016-9061" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    A previously installed malicious Android application which defines a specific signature-level permissions used by Firefox can access API keys meant for Firefox only. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9061/">CVE-2016-9061</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010418">SUSE bug 1010418</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9062</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9062" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9062" ref_url="https://www.suse.com/security/cve/CVE-2016-9062" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Private browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db" and "browser.db-wal" files within the Firefox profile after the mode is exited. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9062/">CVE-2016-9062</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010419">SUSE bug 1010419</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9063</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9063" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9063" ref_url="https://www.suse.com/security/cve/CVE-2016-9063" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003169.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2375-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00004.html" source="SUSE-SU"/>
    <description>
    An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9063/">CVE-2016-9063</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010424">SUSE bug 1010424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047240">SUSE bug 1047240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123115">SUSE bug 1123115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9064</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9064" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9064" ref_url="https://www.suse.com/security/cve/CVE-2016-9064" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated. An attacker who could perform a man-in-the-middle attack on the user's connection to the update server and defeat the certificate pinning protection could provide a malicious signed add-on instead of a valid update. This vulnerability affects Firefox ESR &lt; 45.5 and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9064/">CVE-2016-9064</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010402">SUSE bug 1010402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9065</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9065" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9065" ref_url="https://www.suse.com/security/cve/CVE-2016-9065" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    The location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode, blocking its exiting, and creating of a fake location bar without any user notification. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9065/">CVE-2016-9065</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010403">SUSE bug 1010403</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9066</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9066" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9066" ref_url="https://www.suse.com/security/cve/CVE-2016-9066" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html" source="SUSE-SU"/>
    <description>
    A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9066/">CVE-2016-9066</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010404">SUSE bug 1010404</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9067</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9067" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9067" ref_url="https://www.suse.com/security/cve/CVE-2016-9067" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9067/">CVE-2016-9067</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010405">SUSE bug 1010405</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9068</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9068" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9068" ref_url="https://www.suse.com/security/cve/CVE-2016-9068" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    A use-after-free during web animations when working with timelines resulting in a potentially exploitable crash. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9068/">CVE-2016-9068</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010406">SUSE bug 1010406</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9069</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9069" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9069" ref_url="https://www.suse.com/security/cve/CVE-2016-9069" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9069/">CVE-2016-9069</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010405">SUSE bug 1010405</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9070</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9070" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9070" ref_url="https://www.suse.com/security/cve/CVE-2016-9070" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and engage in limited JavaScript operations violating cross-origin protections. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9070/">CVE-2016-9070</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010420">SUSE bug 1010420</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9071</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9071" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9071" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9071" ref_url="https://www.suse.com/security/cve/CVE-2016-9071" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Content Security Policy combined with HTTP to HTTPS redirection can be used by malicious server to verify whether a known site is within a user's browser history. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9071/">CVE-2016-9071</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010425">SUSE bug 1010425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9072</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9072" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9072" ref_url="https://www.suse.com/security/cve/CVE-2016-9072" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    When a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit NPAPI plugins is not enabled by default. Note: This issue only affects 64-bit Windows. 32-bit Windows and other operating systems are unaffected. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9072/">CVE-2016-9072</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010407">SUSE bug 1010407</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9073</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9073" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9073" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9073" ref_url="https://www.suse.com/security/cve/CVE-2016-9073" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    WebExtensions can bypass security checks to load privileged URLs and potentially escape the WebExtension sandbox. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9073/">CVE-2016-9073</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010421">SUSE bug 1010421</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9074</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9074" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9074" ref_url="https://www.suse.com/security/cve/CVE-2016-9074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird &lt; 45.5, Firefox ESR &lt; 45.5, and Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9074/">CVE-2016-9074</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010422">SUSE bug 1010422</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9075</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9075" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9075" ref_url="https://www.suse.com/security/cve/CVE-2016-9075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being allowed in the permissions list. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9075/">CVE-2016-9075</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010408">SUSE bug 1010408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9076</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9076" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9076" ref_url="https://www.suse.com/security/cve/CVE-2016-9076" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    An issue where a "&lt;select&gt;" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9076/">CVE-2016-9076</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010423">SUSE bug 1010423</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9077</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9077" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9077" ref_url="https://www.suse.com/security/cve/CVE-2016-9077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2872-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Canvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The rendering by the filter is variable depending on the input pixel, allowing for timing attacks when the images are loaded from third party locations. This vulnerability affects Firefox &lt; 50.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9077/">CVE-2016-9077</cve>
	<bugzilla href="https://bugzilla.suse.com/1009026">SUSE bug 1009026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010409">SUSE bug 1010409</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009474973" comment="MozillaFirefox-translations-other is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9078</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9078" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9078" ref_url="https://www.suse.com/security/cve/CVE-2016-9078" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
    <description>
    Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. This can result in same-origin violations against a domain if it loads resources from malicious sites. Cross-origin setting of cookies has been demonstrated without the ability to read them. Note: This issue only affects Firefox 49 and 50. This vulnerability affects Firefox &lt; 50.0.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9078/">CVE-2016-9078</cve>
	<bugzilla href="https://bugzilla.suse.com/1012807">SUSE bug 1012807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9079</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9079" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9079" ref_url="https://www.suse.com/security/cve/CVE-2016-9079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3105-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox &lt; 50.0.2, Firefox ESR &lt; 45.5.1, and Thunderbird &lt; 45.5.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9079/">CVE-2016-9079</cve>
	<bugzilla href="https://bugzilla.suse.com/1012964">SUSE bug 1012964</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9080</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9080" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9080" ref_url="https://www.suse.com/security/cve/CVE-2016-9080" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 50.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9080/">CVE-2016-9080</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9082</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9082" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9082" ref_url="https://www.suse.com/security/cve/CVE-2016-9082" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002978.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004095.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9082/">CVE-2016-9082</cve>
	<bugzilla href="https://bugzilla.suse.com/1007255">SUSE bug 1007255</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486669" comment="libcairo2-32bit-1.15.10-4.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481039" comment="cairo-devel-1.15.10-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481040" comment="libcairo-gobject2-1.15.10-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481041" comment="libcairo-script-interpreter2-1.15.10-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481042" comment="libcairo2-1.15.10-4.5.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9101</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9101" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9101" ref_url="https://www.suse.com/security/cve/CVE-2016-9101" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x (PRO100) NIC device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9101/">CVE-2016-9101</cve>
	<bugzilla href="https://bugzilla.suse.com/1007391">SUSE bug 1007391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013668">SUSE bug 1013668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024181">SUSE bug 1024181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9102</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9102" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9102" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9102" ref_url="https://www.suse.com/security/cve/CVE-2016-9102" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) via a large number of Txattrcreate messages with the same fid number.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9102/">CVE-2016-9102</cve>
	<bugzilla href="https://bugzilla.suse.com/1007450">SUSE bug 1007450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014256">SUSE bug 1014256</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9103</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9103" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9103" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9103" ref_url="https://www.suse.com/security/cve/CVE-2016-9103" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9103/">CVE-2016-9103</cve>
	<bugzilla href="https://bugzilla.suse.com/1007454">SUSE bug 1007454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014259">SUSE bug 1014259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9104</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9104" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9104" ref_url="https://www.suse.com/security/cve/CVE-2016-9104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via a crafted offset, which triggers an out-of-bounds access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9104/">CVE-2016-9104</cve>
	<bugzilla href="https://bugzilla.suse.com/1007493">SUSE bug 1007493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014297">SUSE bug 1014297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034990">SUSE bug 1034990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9105</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9105" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9105" ref_url="https://www.suse.com/security/cve/CVE-2016-9105" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors involving a reference to the source fid object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9105/">CVE-2016-9105</cve>
	<bugzilla href="https://bugzilla.suse.com/1007494">SUSE bug 1007494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014279">SUSE bug 1014279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9106</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9106" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9106" ref_url="https://www.suse.com/security/cve/CVE-2016-9106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html" source="SUSE-SU"/>
    <description>
    Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) by leveraging failure to free an IO vector.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9106/">CVE-2016-9106</cve>
	<bugzilla href="https://bugzilla.suse.com/1007495">SUSE bug 1007495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014299">SUSE bug 1014299</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9131</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9131" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9131" ref_url="https://www.suse.com/security/cve/CVE-2016-9131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0193-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00031.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9131/">CVE-2016-9131</cve>
	<bugzilla href="https://bugzilla.suse.com/1018699">SUSE bug 1018699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9147</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9147" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9147" ref_url="https://www.suse.com/security/cve/CVE-2016-9147" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0193-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00031.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related RRsets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9147/">CVE-2016-9147</cve>
	<bugzilla href="https://bugzilla.suse.com/1018699">SUSE bug 1018699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081545">SUSE bug 1081545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9178</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9178" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9178" ref_url="https://www.suse.com/security/cve/CVE-2016-9178" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00027.html" source="SUSE-SU"/>
    <description>
    The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5 does not initialize a certain integer variable, which allows local users to obtain sensitive information from kernel stack memory by triggering failure of a get_user_ex call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9178/">CVE-2016-9178</cve>
	<bugzilla href="https://bugzilla.suse.com/1008650">SUSE bug 1008650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012353">SUSE bug 1012353</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9180</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9180" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9180" ref_url="https://www.suse.com/security/cve/CVE-2016-9180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007244.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2173-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008410.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-08/msg00033.html" source="SUSE-SU"/>
    <description>
    perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig does not work. External entities are always expanded, regardless of the option's setting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9180/">CVE-2016-9180</cve>
	<bugzilla href="https://bugzilla.suse.com/1008644">SUSE bug 1008644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334495" comment="perl-XML-Twig is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492330" comment="perl-XML-Twig-3.52-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9262</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9262" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9262" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9262" ref_url="https://www.suse.com/security/cve/CVE-2016-9262" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9262/">CVE-2016-9262</cve>
	<bugzilla href="https://bugzilla.suse.com/1009994">SUSE bug 1009994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078851">SUSE bug 1078851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9273</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9273" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9273" ref_url="https://www.suse.com/security/cve/CVE-2016-9273" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004880.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9273/">CVE-2016-9273</cve>
	<bugzilla href="https://bugzilla.suse.com/1010163">SUSE bug 1010163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017693">SUSE bug 1017693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150480">SUSE bug 1150480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9296</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9296" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9296" ref_url="https://www.suse.com/security/cve/CVE-2016-9296" source="SUSE CVE"/>
    <description>
    A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications, will cause a crash and a denial of service when decoding malformed 7z files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9296/">CVE-2016-9296</cve>
	<bugzilla href="https://bugzilla.suse.com/1012574">SUSE bug 1012574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480858" comment="p7zip-16.02-5.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9297</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9297" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9297" ref_url="https://www.suse.com/security/cve/CVE-2016-9297" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII tag values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9297/">CVE-2016-9297</cve>
	<bugzilla href="https://bugzilla.suse.com/1010161">SUSE bug 1010161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011103">SUSE bug 1011103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9310</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9310" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9310" ref_url="https://www.suse.com/security/cve/CVE-2016-9310" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002589.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3280-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html" source="SUSE-SU"/>
    <description>
    The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9310/">CVE-2016-9310</cve>
	<bugzilla href="https://bugzilla.suse.com/1011377">SUSE bug 1011377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011421">SUSE bug 1011421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012330">SUSE bug 1012330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9311</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9311" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9311" ref_url="https://www.suse.com/security/cve/CVE-2016-9311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002498.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002589.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3280-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html" source="SUSE-SU"/>
    <description>
    ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9311/">CVE-2016-9311</cve>
	<bugzilla href="https://bugzilla.suse.com/1011377">SUSE bug 1011377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011421">SUSE bug 1011421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012330">SUSE bug 1012330</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9313</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9313" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9313" ref_url="https://www.suse.com/security/cve/CVE-2016-9313" source="SUSE CVE"/>
    <description>
    security/keys/big_key.c in the Linux kernel before 4.8.7 mishandles unsuccessful crypto registration in conjunction with successful key-type registration, which allows local users to cause a denial of service (NULL pointer dereference and panic) or possibly have unspecified other impact via a crafted application that uses the big_key data type.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9313/">CVE-2016-9313</cve>
	<bugzilla href="https://bugzilla.suse.com/1012356">SUSE bug 1012356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9317</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9317" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9317" ref_url="https://www.suse.com/security/cve/CVE-2016-9317" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002640.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002645.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00101.html" source="SUSE-SU"/>
    <description>
    The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9317/">CVE-2016-9317</cve>
	<bugzilla href="https://bugzilla.suse.com/1022283">SUSE bug 1022283</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9372</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9372" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9372" ref_url="https://www.suse.com/security/cve/CVE-2016-9372" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00116.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was addressed in plugins/profinet/packet-pn-rtc-one.c by rejecting input with too many I/O objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9372/">CVE-2016-9372</cve>
	<bugzilla href="https://bugzilla.suse.com/1010807">SUSE bug 1010807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9373</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9373" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9373" ref_url="https://www.suse.com/security/cve/CVE-2016-9373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00116.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9373/">CVE-2016-9373</cve>
	<bugzilla href="https://bugzilla.suse.com/1010754">SUSE bug 1010754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010911">SUSE bug 1010911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9374</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9374" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9374" ref_url="https://www.suse.com/security/cve/CVE-2016-9374" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00116.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9374/">CVE-2016-9374</cve>
	<bugzilla href="https://bugzilla.suse.com/1010752">SUSE bug 1010752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010911">SUSE bug 1010911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9375</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9375" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9375" ref_url="https://www.suse.com/security/cve/CVE-2016-9375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00116.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9375/">CVE-2016-9375</cve>
	<bugzilla href="https://bugzilla.suse.com/1010740">SUSE bug 1010740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010911">SUSE bug 1010911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9376</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9376" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9376" ref_url="https://www.suse.com/security/cve/CVE-2016-9376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00116.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9376/">CVE-2016-9376</cve>
	<bugzilla href="https://bugzilla.suse.com/1010735">SUSE bug 1010735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010911">SUSE bug 1010911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9377</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9377" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9377" ref_url="https://www.suse.com/security/cve/CVE-2016-9377" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging IDT entry miscalculation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9377/">CVE-2016-9377</cve>
	<bugzilla href="https://bugzilla.suse.com/1009108">SUSE bug 1009108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9378</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9378" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9378" ref_url="https://www.suse.com/security/cve/CVE-2016-9378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging an incorrect choice for software interrupt delivery.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9378/">CVE-2016-9378</cve>
	<bugzilla href="https://bugzilla.suse.com/1009108">SUSE bug 1009108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9379</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9379" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9379" ref_url="https://www.suse.com/security/cve/CVE-2016-9379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.9/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9379/">CVE-2016-9379</cve>
	<bugzilla href="https://bugzilla.suse.com/1009111">SUSE bug 1009111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9380</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9380" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9380" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9380" ref_url="https://www.suse.com/security/cve/CVE-2016-9380" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9380/">CVE-2016-9380</cve>
	<bugzilla href="https://bugzilla.suse.com/1009111">SUSE bug 1009111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9381</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9381" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9381" ref_url="https://www.suse.com/security/cve/CVE-2016-9381" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9381/">CVE-2016-9381</cve>
	<bugzilla href="https://bugzilla.suse.com/1009109">SUSE bug 1009109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9382</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9382" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9382" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9382" ref_url="https://www.suse.com/security/cve/CVE-2016-9382" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9382/">CVE-2016-9382</cve>
	<bugzilla href="https://bugzilla.suse.com/1009103">SUSE bug 1009103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9383</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9383" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9383" ref_url="https://www.suse.com/security/cve/CVE-2016-9383" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive information, cause a denial of service (host crash), or execute arbitrary code on the host by leveraging broken emulation of bit test instructions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9383/">CVE-2016-9383</cve>
	<bugzilla href="https://bugzilla.suse.com/1009107">SUSE bug 1009107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9384</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9384" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9384" ref_url="https://www.suse.com/security/cve/CVE-2016-9384" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
    <description>
    Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9384/">CVE-2016-9384</cve>
	<bugzilla href="https://bugzilla.suse.com/1009105">SUSE bug 1009105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9385</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9385" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9385" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9385" ref_url="https://www.suse.com/security/cve/CVE-2016-9385" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging lack of canonical address checks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9385/">CVE-2016-9385</cve>
	<bugzilla href="https://bugzilla.suse.com/1009104">SUSE bug 1009104</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9386</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9386" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9386" ref_url="https://www.suse.com/security/cve/CVE-2016-9386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9386/">CVE-2016-9386</cve>
	<bugzilla href="https://bugzilla.suse.com/1009100">SUSE bug 1009100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9387</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9387" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9387" ref_url="https://www.suse.com/security/cve/CVE-2016-9387" source="SUSE CVE"/>
    <description>
    Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-9387/">CVE-2016-9387</cve>
	<bugzilla href="https://bugzilla.suse.com/1010960">SUSE bug 1010960</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9388</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9388" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9388" ref_url="https://www.suse.com/security/cve/CVE-2016-9388" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9388/">CVE-2016-9388</cve>
	<bugzilla href="https://bugzilla.suse.com/1010975">SUSE bug 1010975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078851">SUSE bug 1078851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9389</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9389" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9389" ref_url="https://www.suse.com/security/cve/CVE-2016-9389" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9389/">CVE-2016-9389</cve>
	<bugzilla href="https://bugzilla.suse.com/1010968">SUSE bug 1010968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078851">SUSE bug 1078851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9390</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9390" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9390" ref_url="https://www.suse.com/security/cve/CVE-2016-9390" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9390/">CVE-2016-9390</cve>
	<bugzilla href="https://bugzilla.suse.com/1010774">SUSE bug 1010774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078851">SUSE bug 1078851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9391</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9391" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9391" ref_url="https://www.suse.com/security/cve/CVE-2016-9391" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9391/">CVE-2016-9391</cve>
	<bugzilla href="https://bugzilla.suse.com/1010782">SUSE bug 1010782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078851">SUSE bug 1078851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9392</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9392" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9392" ref_url="https://www.suse.com/security/cve/CVE-2016-9392" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9392/">CVE-2016-9392</cve>
	<bugzilla href="https://bugzilla.suse.com/1010757">SUSE bug 1010757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9393</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9393" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9393" ref_url="https://www.suse.com/security/cve/CVE-2016-9393" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9393/">CVE-2016-9393</cve>
	<bugzilla href="https://bugzilla.suse.com/1010757">SUSE bug 1010757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010766">SUSE bug 1010766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078851">SUSE bug 1078851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9394</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9394" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9394" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9394" ref_url="https://www.suse.com/security/cve/CVE-2016-9394" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9394/">CVE-2016-9394</cve>
	<bugzilla href="https://bugzilla.suse.com/1010756">SUSE bug 1010756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010757">SUSE bug 1010757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078851">SUSE bug 1078851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9395</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9395" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9395" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9395" ref_url="https://www.suse.com/security/cve/CVE-2016-9395" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" source="SUSE-SU"/>
    <description>
    The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9395/">CVE-2016-9395</cve>
	<bugzilla href="https://bugzilla.suse.com/1010977">SUSE bug 1010977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9396</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9396" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9396" ref_url="https://www.suse.com/security/cve/CVE-2016-9396" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005972.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005977.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1315-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html" source="SUSE-SU"/>
    <description>
    The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9396/">CVE-2016-9396</cve>
	<bugzilla href="https://bugzilla.suse.com/1010783">SUSE bug 1010783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021871">SUSE bug 1021871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082397">SUSE bug 1082397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154883">SUSE bug 1154883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334493" comment="jasper is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782675" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782676" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335438" comment="libjasper-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338806" comment="libjasper4 is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169397" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9397</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9397" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9397" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9397" ref_url="https://www.suse.com/security/cve/CVE-2016-9397" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
    <description>
    The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9397/">CVE-2016-9397</cve>
	<bugzilla href="https://bugzilla.suse.com/1010786">SUSE bug 1010786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011829">SUSE bug 1011829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335448" comment="libjasper-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659674" comment="libjasper4 is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9398</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9398" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9398" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9398" ref_url="https://www.suse.com/security/cve/CVE-2016-9398" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9398/">CVE-2016-9398</cve>
	<bugzilla href="https://bugzilla.suse.com/1010979">SUSE bug 1010979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492479" comment="libjasper4-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495468" comment="libjasper-devel-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497875" comment="jasper-2.0.14-3.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9399</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9399" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9399" ref_url="https://www.suse.com/security/cve/CVE-2016-9399" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9399/">CVE-2016-9399</cve>
	<bugzilla href="https://bugzilla.suse.com/1010980">SUSE bug 1010980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492479" comment="libjasper4-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495468" comment="libjasper-devel-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497875" comment="jasper-2.0.14-3.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9401</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9401" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9401" ref_url="https://www.suse.com/security/cve/CVE-2016-9401" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002891.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002896.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1402-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00082.html" source="SUSE-SU"/>
    <description>
    popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9401/">CVE-2016-9401</cve>
	<bugzilla href="https://bugzilla.suse.com/1010845">SUSE bug 1010845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123788">SUSE bug 1123788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159416">SUSE bug 1159416</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481018" comment="bash-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481019" comment="bash-devel-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481020" comment="bash-doc-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481021" comment="bash-lang-4.4-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481022" comment="libreadline7-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481023" comment="readline-devel-7.0-9.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481024" comment="readline-doc-7.0-9.7.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9434</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9434" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9434" ref_url="https://www.suse.com/security/cve/CVE-2016-9434" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9434/">CVE-2016-9434</cve>
	<bugzilla href="https://bugzilla.suse.com/1011283">SUSE bug 1011283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9435</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9435" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9435" ref_url="https://www.suse.com/security/cve/CVE-2016-9435" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to &lt;dd&gt; tags.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9435/">CVE-2016-9435</cve>
	<bugzilla href="https://bugzilla.suse.com/1011284">SUSE bug 1011284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9436</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9436" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9436" ref_url="https://www.suse.com/security/cve/CVE-2016-9436" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a &lt;i&gt; tag.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9436/">CVE-2016-9436</cve>
	<bugzilla href="https://bugzilla.suse.com/1011285">SUSE bug 1011285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9437</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9437" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9437" ref_url="https://www.suse.com/security/cve/CVE-2016-9437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) and possibly memory corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9437/">CVE-2016-9437</cve>
	<bugzilla href="https://bugzilla.suse.com/1011286">SUSE bug 1011286</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9438</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9438" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9438" ref_url="https://www.suse.com/security/cve/CVE-2016-9438" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9438/">CVE-2016-9438</cve>
	<bugzilla href="https://bugzilla.suse.com/1011287">SUSE bug 1011287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9439</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9439" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9439" ref_url="https://www.suse.com/security/cve/CVE-2016-9439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9439/">CVE-2016-9439</cve>
	<bugzilla href="https://bugzilla.suse.com/1011288">SUSE bug 1011288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9440</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9440" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9440" ref_url="https://www.suse.com/security/cve/CVE-2016-9440" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9440/">CVE-2016-9440</cve>
	<bugzilla href="https://bugzilla.suse.com/1011289">SUSE bug 1011289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9441</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9441" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9441" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9441" ref_url="https://www.suse.com/security/cve/CVE-2016-9441" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9441/">CVE-2016-9441</cve>
	<bugzilla href="https://bugzilla.suse.com/1011290">SUSE bug 1011290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9442</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9442" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9442" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9442" ref_url="https://www.suse.com/security/cve/CVE-2016-9442" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause memory corruption in certain conditions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9442/">CVE-2016-9442</cve>
	<bugzilla href="https://bugzilla.suse.com/1011291">SUSE bug 1011291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9443</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9443" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9443" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9443" ref_url="https://www.suse.com/security/cve/CVE-2016-9443" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9443/">CVE-2016-9443</cve>
	<bugzilla href="https://bugzilla.suse.com/1011292">SUSE bug 1011292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9444</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9444" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9444" ref_url="https://www.suse.com/security/cve/CVE-2016-9444" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0193-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00031.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9444/">CVE-2016-9444</cve>
	<bugzilla href="https://bugzilla.suse.com/1018699">SUSE bug 1018699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9448</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9448" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9448" ref_url="https://www.suse.com/security/cve/CVE-2016-9448" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII to values that access 0-byte arrays.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9297.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9448/">CVE-2016-9448</cve>
	<bugzilla href="https://bugzilla.suse.com/1010161">SUSE bug 1010161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011103">SUSE bug 1011103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9453</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9453" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9453" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9453" ref_url="https://www.suse.com/security/cve/CVE-2016-9453" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002537.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0074-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00047.html" source="SUSE-SU"/>
    <description>
    The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9453/">CVE-2016-9453</cve>
	<bugzilla href="https://bugzilla.suse.com/1007280">SUSE bug 1007280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011107">SUSE bug 1011107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9538</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9538" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9538" ref_url="https://www.suse.com/security/cve/CVE-2016-9538" source="SUSE CVE"/>
    <description>
    tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9538/">CVE-2016-9538</cve>
	<bugzilla href="https://bugzilla.suse.com/1004519">SUSE bug 1004519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011841">SUSE bug 1011841</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9555</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9555" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9555" ref_url="https://www.suse.com/security/cve/CVE-2016-9555" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3049-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3094-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3096-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3098-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3104-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3109-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3111-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3116-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3197-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00034.html" source="SUSE-SU"/>
    <description>
    The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9555/">CVE-2016-9555</cve>
	<bugzilla href="https://bugzilla.suse.com/1011685">SUSE bug 1011685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012183">SUSE bug 1012183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169557" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9557</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9557" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9557" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9557" ref_url="https://www.suse.com/security/cve/CVE-2016-9557" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
    <description>
    Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9557/">CVE-2016-9557</cve>
	<bugzilla href="https://bugzilla.suse.com/1010786">SUSE bug 1010786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011829">SUSE bug 1011829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9560</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9560" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9560" ref_url="https://www.suse.com/security/cve/CVE-2016-9560" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9560/">CVE-2016-9560</cve>
	<bugzilla href="https://bugzilla.suse.com/1011830">SUSE bug 1011830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9577</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9577" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9577" ref_url="https://www.suse.com/security/cve/CVE-2016-9577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0421-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00015.html" source="SUSE-SU"/>
    <description>
    A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9577/">CVE-2016-9577</cve>
	<bugzilla href="https://bugzilla.suse.com/1023078">SUSE bug 1023078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488364" comment="libspice-server-devel-0.14.1-2.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488365" comment="libspice-server1-0.14.1-2.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9578</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9578" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9578" ref_url="https://www.suse.com/security/cve/CVE-2016-9578" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0421-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00015.html" source="SUSE-SU"/>
    <description>
    A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9578/">CVE-2016-9578</cve>
	<bugzilla href="https://bugzilla.suse.com/1023078">SUSE bug 1023078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1023079">SUSE bug 1023079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488364" comment="libspice-server-devel-0.14.1-2.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488365" comment="libspice-server1-0.14.1-2.21 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9583</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9583" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9583" ref_url="https://www.suse.com/security/cve/CVE-2016-9583" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002789.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00061.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9583/">CVE-2016-9583</cve>
	<bugzilla href="https://bugzilla.suse.com/1015400">SUSE bug 1015400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9584</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9584" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9584" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9584" ref_url="https://www.suse.com/security/cve/CVE-2016-9584" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1989-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003605.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2002-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00108.html" source="SUSE-SU"/>
    <description>
    libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9584/">CVE-2016-9584</cve>
	<bugzilla href="https://bugzilla.suse.com/1015964">SUSE bug 1015964</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480551" comment="libical2-2.0.0-1.37 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482795" comment="libical-devel-2.0.0-1.37 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9586</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9586" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9586" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9586" ref_url="https://www.suse.com/security/cve/CVE-2016-9586" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1042-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002808.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002809.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1105-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00094.html" source="SUSE-SU"/>
    <description>
    curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9586/">CVE-2016-9586</cve>
	<bugzilla href="https://bugzilla.suse.com/1015332">SUSE bug 1015332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9588</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9588" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9588" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9588" ref_url="https://www.suse.com/security/cve/CVE-2016-9588" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the #BP and #OF exceptions, which allows guest OS users to cause a denial of service (guest OS crash) by declining to handle an exception thrown by an L2 guest.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9588/">CVE-2016-9588</cve>
	<bugzilla href="https://bugzilla.suse.com/1015703">SUSE bug 1015703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017512">SUSE bug 1017512</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9591</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9591" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9591" ref_url="https://www.suse.com/security/cve/CVE-2016-9591" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html" source="SUSE-SU"/>
    <description>
    JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9591/">CVE-2016-9591</cve>
	<bugzilla href="https://bugzilla.suse.com/1015993">SUSE bug 1015993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9594</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9594" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9594" ref_url="https://www.suse.com/security/cve/CVE-2016-9594" source="SUSE CVE"/>
    <description>
    curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value.  Having a weak or virtually non-existent random value makes the operations that use it vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9594/">CVE-2016-9594</cve>
	<bugzilla href="https://bugzilla.suse.com/1016738">SUSE bug 1016738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1017161">SUSE bug 1017161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042181">SUSE bug 1042181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333977" comment="curl is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333977" comment="curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335174" comment="libcurl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335173" comment="libcurl4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335172" comment="libcurl4-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9600</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9600" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9600" ref_url="https://www.suse.com/security/cve/CVE-2016-9600" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002789.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00061.html" source="SUSE-SU"/>
    <description>
    JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9600/">CVE-2016-9600</cve>
	<bugzilla href="https://bugzilla.suse.com/1018088">SUSE bug 1018088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9602</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9602" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9602" ref_url="https://www.suse.com/security/cve/CVE-2016-9602" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9602/">CVE-2016-9602</cve>
	<bugzilla href="https://bugzilla.suse.com/1020427">SUSE bug 1020427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169604" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9604</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9604" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9604" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9604" ref_url="https://www.suse.com/security/cve/CVE-2016-9604" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
    <description>
    It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9604/">CVE-2016-9604</cve>
	<bugzilla href="https://bugzilla.suse.com/1035576">SUSE bug 1035576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9621</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9621" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9621" ref_url="https://www.suse.com/security/cve/CVE-2016-9621" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9429.  Reason: This candidate is a reservation duplicate of CVE-2016-9429.  Notes: All CVE users should reference CVE-2016-9429 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-9621/">CVE-2016-9621</cve>
	<bugzilla href="https://bugzilla.suse.com/1011278">SUSE bug 1011278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012020">SUSE bug 1012020</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9622</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9622" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9622" ref_url="https://www.suse.com/security/cve/CVE-2016-9622" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9622/">CVE-2016-9622</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012021">SUSE bug 1012021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9623</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9623" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9623" ref_url="https://www.suse.com/security/cve/CVE-2016-9623" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9623/">CVE-2016-9623</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012022">SUSE bug 1012022</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9624</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9624" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9624" ref_url="https://www.suse.com/security/cve/CVE-2016-9624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9624/">CVE-2016-9624</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012023">SUSE bug 1012023</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9625</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9625" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9625" ref_url="https://www.suse.com/security/cve/CVE-2016-9625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9625/">CVE-2016-9625</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012024">SUSE bug 1012024</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9626</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9626" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9626" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9626" ref_url="https://www.suse.com/security/cve/CVE-2016-9626" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9626/">CVE-2016-9626</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012025">SUSE bug 1012025</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9627</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9627" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9627" ref_url="https://www.suse.com/security/cve/CVE-2016-9627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (heap buffer overflow and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9627/">CVE-2016-9627</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012026">SUSE bug 1012026</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9628</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9628" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9628" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9628" ref_url="https://www.suse.com/security/cve/CVE-2016-9628" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9628/">CVE-2016-9628</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012027">SUSE bug 1012027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9629</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9629" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9629" ref_url="https://www.suse.com/security/cve/CVE-2016-9629" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9629/">CVE-2016-9629</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012028">SUSE bug 1012028</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9630</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9630" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9630" ref_url="https://www.suse.com/security/cve/CVE-2016-9630" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (global buffer overflow and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9630/">CVE-2016-9630</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012029">SUSE bug 1012029</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9631</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9631" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9631" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9631" ref_url="https://www.suse.com/security/cve/CVE-2016-9631" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9631/">CVE-2016-9631</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012030">SUSE bug 1012030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9632</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9632" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9632" ref_url="https://www.suse.com/security/cve/CVE-2016-9632" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (global buffer overflow and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9632/">CVE-2016-9632</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012031">SUSE bug 1012031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9633</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9633" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9633" ref_url="https://www.suse.com/security/cve/CVE-2016-9633" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002454.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (infinite loop and resource consumption) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9633/">CVE-2016-9633</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1012032">SUSE bug 1012032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9637</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9637" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9637" ref_url="https://www.suse.com/security/cve/CVE-2016-9637" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9637/">CVE-2016-9637</cve>
	<bugzilla href="https://bugzilla.suse.com/1011652">SUSE bug 1011652</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9639</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9639" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9639" ref_url="https://www.suse.com/security/cve/CVE-2016-9639" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008281.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1053-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00061.html" source="SUSE-SU"/>
    <description>
    Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9639/">CVE-2016-9639</cve>
	<bugzilla href="https://bugzilla.suse.com/1012398">SUSE bug 1012398</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481641" comment="python3-salt-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481642" comment="salt-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481643" comment="salt-bash-completion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481644" comment="salt-doc-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481645" comment="salt-minion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481646" comment="salt-zsh-completion-2019.2.0-4.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488438" comment="salt-api-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488439" comment="salt-cloud-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488440" comment="salt-fish-completion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488441" comment="salt-master-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488442" comment="salt-proxy-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488443" comment="salt-ssh-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488444" comment="salt-syndic-2019.2.0-4.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9776</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9776" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9776" ref_url="https://www.suse.com/security/cve/CVE-2016-9776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9776/">CVE-2016-9776</cve>
	<bugzilla href="https://bugzilla.suse.com/1013285">SUSE bug 1013285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013657">SUSE bug 1013657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024182">SUSE bug 1024182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9778</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9778" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9778" ref_url="https://www.suse.com/security/cve/CVE-2016-9778" source="SUSE CVE"/>
    <description>
    An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also providing authoritative service. A vulnerable server could be intentionally stopped by an attacker if it was using a configuration that met the criteria for the vulnerability and if the attacker could cause it to accept a query that possessed the required attributes. Please note: This vulnerability affects the "nxdomain-redirect" feature, which is one of two methods of handling NXDOMAIN redirection, and is only available in certain versions of BIND. Redirection using zones of type "redirect" is not affected by this vulnerability. Affects BIND 9.9.8-S1 -&gt; 9.9.8-S3, 9.9.9-S1 -&gt; 9.9.9-S6, 9.11.0-9.11.0-P1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9778/">CVE-2016-9778</cve>
	<bugzilla href="https://bugzilla.suse.com/1018699">SUSE bug 1018699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018703">SUSE bug 1018703</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9794</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9794" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9794" ref_url="https://www.suse.com/security/cve/CVE-2016-9794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3146-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3188-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3217-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3252-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0227-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0228-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0230-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0246-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0294-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00057.html" source="SUSE-SU"/>
    <description>
    Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted SNDRV_PCM_TRIGGER_START command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9794/">CVE-2016-9794</cve>
	<bugzilla href="https://bugzilla.suse.com/1013533">SUSE bug 1013533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013543">SUSE bug 1013543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013604">SUSE bug 1013604</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9797</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9797" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9797" ref_url="https://www.suse.com/security/cve/CVE-2016-9797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a buffer over-read was observed in "l2cap_dump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9797/">CVE-2016-9797</cve>
	<bugzilla href="https://bugzilla.suse.com/1013708">SUSE bug 1013708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013712">SUSE bug 1013712</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334188" comment="bluez is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490105" comment="libbluetooth3-5.48-5.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009508174" comment="bluez-cups-5.48-5.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334188" comment="bluez is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335460" comment="bluez-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335459" comment="libbluetooth3 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009494805" comment="bluez-5.48-5.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009494806" comment="bluez-devel-5.48-5.16.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9798</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9798" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9798" ref_url="https://www.suse.com/security/cve/CVE-2016-9798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2585-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2588-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00072.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9798/">CVE-2016-9798</cve>
	<bugzilla href="https://bugzilla.suse.com/1013708">SUSE bug 1013708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013712">SUSE bug 1013712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013732">SUSE bug 1013732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490755" comment="libbluetooth3-5.48-5.19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009508513" comment="bluez-cups-5.48-5.19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009494996" comment="bluez-5.48-5.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009494997" comment="bluez-devel-5.48-5.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9800</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9800" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9800" ref_url="https://www.suse.com/security/cve/CVE-2016-9800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005161.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00064.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a buffer overflow was observed in "pin_code_reply_dump" function in "tools/parser/hci.c" source file. The issue exists because "pin" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "pin_code_reply_cp *cp" parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9800/">CVE-2016-9800</cve>
	<bugzilla href="https://bugzilla.suse.com/1013721">SUSE bug 1013721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790321" comment="libbluetooth3-5.48-5.8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790324" comment="bluez-cups-5.48-5.8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790322" comment="bluez-5.48-5.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790323" comment="bluez-devel-5.48-5.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9801</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9801" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9801" ref_url="https://www.suse.com/security/cve/CVE-2016-9801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005161.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00064.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a buffer overflow was observed in "set_ext_ctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dump file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9801/">CVE-2016-9801</cve>
	<bugzilla href="https://bugzilla.suse.com/1013732">SUSE bug 1013732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334188" comment="bluez is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790321" comment="libbluetooth3-5.48-5.8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790324" comment="bluez-cups-5.48-5.8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334188" comment="bluez is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335460" comment="bluez-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335459" comment="libbluetooth3 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790322" comment="bluez-5.48-5.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790323" comment="bluez-devel-5.48-5.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9802</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9802" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9802" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9802" ref_url="https://www.suse.com/security/cve/CVE-2016-9802" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9802/">CVE-2016-9802</cve>
	<bugzilla href="https://bugzilla.suse.com/1013893">SUSE bug 1013893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015173">SUSE bug 1015173</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334188" comment="bluez is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490105" comment="libbluetooth3-5.48-5.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009508174" comment="bluez-cups-5.48-5.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334188" comment="bluez is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335460" comment="bluez-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335459" comment="libbluetooth3 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009494805" comment="bluez-5.48-5.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009494806" comment="bluez-devel-5.48-5.16.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9803</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9803" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9803" ref_url="https://www.suse.com/security/cve/CVE-2016-9803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012661.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, an out-of-bounds read was observed in "le_meta_ev_dump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' (which is used to read correct element from 'ev_le_meta_str' array) is overflowed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9803/">CVE-2016-9803</cve>
	<bugzilla href="https://bugzilla.suse.com/1013885">SUSE bug 1013885</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334185" comment="bluez is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336475" comment="bluez-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336474" comment="libbluetooth3 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9804</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9804" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9804" ref_url="https://www.suse.com/security/cve/CVE-2016-9804" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005161.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a buffer overflow was observed in "commands_dump" function in "tools/parser/csr.c" source file. The issue exists because "commands" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "frm-&gt;ptr" parameter. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9804/">CVE-2016-9804</cve>
	<bugzilla href="https://bugzilla.suse.com/1013877">SUSE bug 1013877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481286" comment="libbluetooth3-5.48-5.13.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489054" comment="bluez-cups-5.48-5.13.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486593" comment="bluez-5.48-5.13.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486594" comment="bluez-devel-5.48-5.13.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9840</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9840" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9840" ref_url="https://www.suse.com/security/cve/CVE-2016-9840" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002506.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3202-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0077-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0080-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9840/">CVE-2016-9840</cve>
	<bugzilla href="https://bugzilla.suse.com/1003579">SUSE bug 1003579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022633">SUSE bug 1022633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1023215">SUSE bug 1023215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1062104">SUSE bug 1062104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120866">SUSE bug 1120866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123150">SUSE bug 1123150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127473">SUSE bug 1127473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184301">SUSE bug 1184301</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9841</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9841" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9841" ref_url="https://www.suse.com/security/cve/CVE-2016-9841" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002506.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3202-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0077-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0080-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9841/">CVE-2016-9841</cve>
	<bugzilla href="https://bugzilla.suse.com/1003579">SUSE bug 1003579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022633">SUSE bug 1022633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064070">SUSE bug 1064070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120866">SUSE bug 1120866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123150">SUSE bug 1123150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127473">SUSE bug 1127473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9842</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9842" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9842" ref_url="https://www.suse.com/security/cve/CVE-2016-9842" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002506.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004218.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3202-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0077-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0080-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9842/">CVE-2016-9842</cve>
	<bugzilla href="https://bugzilla.suse.com/1003580">SUSE bug 1003580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022633">SUSE bug 1022633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1023215">SUSE bug 1023215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1062104">SUSE bug 1062104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120866">SUSE bug 1120866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123150">SUSE bug 1123150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127473">SUSE bug 1127473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184301">SUSE bug 1184301</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9843</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9843" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9843" ref_url="https://www.suse.com/security/cve/CVE-2016-9843" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002506.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-January/002541.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3972-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20183972-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0555-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190555-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0628-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20190628-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005775.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3202-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0077-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0080-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3478-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00021.html" source="SUSE-SU"/>
    <description>
    The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9843/">CVE-2016-9843</cve>
	<bugzilla href="https://bugzilla.suse.com/1003580">SUSE bug 1003580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013882">SUSE bug 1013882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1062104">SUSE bug 1062104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120866">SUSE bug 1120866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123150">SUSE bug 1123150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127473">SUSE bug 1127473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184301">SUSE bug 1184301</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487793" comment="zlib-devel-32bit-1.2.11-3.6.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481431" comment="libminizip1-1.2.11-3.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481432" comment="libz1-1.2.11-3.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481433" comment="libz1-32bit-1.2.11-3.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481434" comment="minizip-devel-1.2.11-3.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481435" comment="zlib-devel-1.2.11-3.6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481436" comment="zlib-devel-static-1.2.11-3.6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790325" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790326" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790327" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790328" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790329" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790330" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9844</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9844" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9844" ref_url="https://www.suse.com/security/cve/CVE-2016-9844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002686.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2978-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00013.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9844/">CVE-2016-9844</cve>
	<bugzilla href="https://bugzilla.suse.com/1013992">SUSE bug 1013992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159417">SUSE bug 1159417</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481670" comment="unzip-6.00-4.8.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9845</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9845" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9845" ref_url="https://www.suse.com/security/cve/CVE-2016-9845" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9845/">CVE-2016-9845</cve>
	<bugzilla href="https://bugzilla.suse.com/1013767">SUSE bug 1013767</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9846</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9846" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9846" ref_url="https://www.suse.com/security/cve/CVE-2016-9846" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while updating the cursor data in update_cursor_data_virgl. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9846/">CVE-2016-9846</cve>
	<bugzilla href="https://bugzilla.suse.com/1013764">SUSE bug 1013764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169893" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9893</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9893" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9893" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9893" ref_url="https://www.suse.com/security/cve/CVE-2016-9893" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9893/">CVE-2016-9893</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169894" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9894</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9894" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9894" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9894" ref_url="https://www.suse.com/security/cve/CVE-2016-9894" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
    <description>
    A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later writers will overflow the buffer, resulting in a potentially exploitable crash. This vulnerability affects Firefox &lt; 50.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9894/">CVE-2016-9894</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9895</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9895" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9895" ref_url="https://www.suse.com/security/cve/CVE-2016-9895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-9895/">CVE-2016-9895</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9896</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9896" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9896" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9896" ref_url="https://www.suse.com/security/cve/CVE-2016-9896" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
    <description>
    Use-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not currently enabled by default. This vulnerability affects Firefox &lt; 50.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9896/">CVE-2016-9896</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9897</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9897" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9897" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9897" ref_url="https://www.suse.com/security/cve/CVE-2016-9897" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9897/">CVE-2016-9897</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9898</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9898" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9898" ref_url="https://www.suse.com/security/cve/CVE-2016-9898" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9898/">CVE-2016-9898</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9899</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9899" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9899" ref_url="https://www.suse.com/security/cve/CVE-2016-9899" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9899/">CVE-2016-9899</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9900</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9900" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9900" ref_url="https://www.suse.com/security/cve/CVE-2016-9900" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cross-domain data leakage. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9900/">CVE-2016-9900</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9901</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9901" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9901" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9901" ref_url="https://www.suse.com/security/cve/CVE-2016-9901" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
    <description>
    HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" (unprivileged) page, giving it access to Pocket's messaging API through HTML injection. This vulnerability affects Firefox ESR &lt; 45.6 and Firefox &lt; 50.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9901/">CVE-2016-9901</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9902</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9902" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9902" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9902" ref_url="https://www.suse.com/security/cve/CVE-2016-9902" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
    <description>
    The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10s enabled. This vulnerability affects Firefox ESR &lt; 45.6 and Firefox &lt; 50.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9902/">CVE-2016-9902</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9903</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9903" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9903" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9903" ref_url="https://www.suse.com/security/cve/CVE-2016-9903" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
    <description>
    Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an additional vulnerability allowed this resource to be loaded as a document it could allow injecting content and script into an add-on's context. This vulnerability affects Firefox &lt; 50.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-9903/">CVE-2016-9903</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9904</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9904" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9904" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9904" ref_url="https://www.suse.com/security/cve/CVE-2016-9904" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3184-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contexts. This could be used to leak information, such as usernames embedded in JavaScript code, across websites. This vulnerability affects Firefox &lt; 50.1, Firefox ESR &lt; 45.6, and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9904/">CVE-2016-9904</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9905</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9905" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9905" ref_url="https://www.suse.com/security/cve/CVE-2016-9905" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3307-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:3308-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-12/msg00160.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0026-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-01/msg00013.html" source="SUSE-SU"/>
    <description>
    A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR &lt; 45.6 and Thunderbird &lt; 45.6.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9905/">CVE-2016-9905</cve>
	<bugzilla href="https://bugzilla.suse.com/1015422">SUSE bug 1015422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015527">SUSE bug 1015527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015528">SUSE bug 1015528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015529">SUSE bug 1015529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015530">SUSE bug 1015530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015531">SUSE bug 1015531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015533">SUSE bug 1015533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015534">SUSE bug 1015534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015535">SUSE bug 1015535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015536">SUSE bug 1015536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015537">SUSE bug 1015537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015538">SUSE bug 1015538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015540">SUSE bug 1015540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015541">SUSE bug 1015541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015542">SUSE bug 1015542</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9907</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9907" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9907" ref_url="https://www.suse.com/security/cve/CVE-2016-9907" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredir_handle_destroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9907/">CVE-2016-9907</cve>
	<bugzilla href="https://bugzilla.suse.com/1014109">SUSE bug 1014109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014490">SUSE bug 1014490</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9908</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9908" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9908" ref_url="https://www.suse.com/security/cve/CVE-2016-9908" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET' command. A guest user/process could use this flaw to leak contents of the host memory bytes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9908/">CVE-2016-9908</cve>
	<bugzilla href="https://bugzilla.suse.com/1014514">SUSE bug 1014514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9911</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9911" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9911" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9911" ref_url="https://www.suse.com/security/cve/CVE-2016-9911" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehci_init_transfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9911/">CVE-2016-9911</cve>
	<bugzilla href="https://bugzilla.suse.com/1014111">SUSE bug 1014111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014507">SUSE bug 1014507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9912</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9912" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9912" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9912" ref_url="https://www.suse.com/security/cve/CVE-2016-9912" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while destroying gpu resource object in 'virtio_gpu_resource_destroy'. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9912/">CVE-2016-9912</cve>
	<bugzilla href="https://bugzilla.suse.com/1014112">SUSE bug 1014112</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9913</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9913" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9913" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9913" ref_url="https://www.suse.com/security/cve/CVE-2016-9913" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) via vectors involving the order of resource cleanup.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9913/">CVE-2016-9913</cve>
	<bugzilla href="https://bugzilla.suse.com/1014110">SUSE bug 1014110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1014311">SUSE bug 1014311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169917" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9917</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9917" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9917" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9917" ref_url="https://www.suse.com/security/cve/CVE-2016-9917" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005496.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1353-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1476-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, a buffer overflow was observed in "read_n" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9917/">CVE-2016-9917</cve>
	<bugzilla href="https://bugzilla.suse.com/1015171">SUSE bug 1015171</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334188" comment="bluez is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490105" comment="libbluetooth3-5.48-5.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009508174" comment="bluez-cups-5.48-5.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334188" comment="bluez is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335460" comment="bluez-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335459" comment="libbluetooth3 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009494805" comment="bluez-5.48-5.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009494806" comment="bluez-devel-5.48-5.16.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169918" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9918</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9918" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9918" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9918" ref_url="https://www.suse.com/security/cve/CVE-2016-9918" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005494.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1198-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00054.html" source="SUSE-SU"/>
    <description>
    In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-9918/">CVE-2016-9918</cve>
	<bugzilla href="https://bugzilla.suse.com/1013893">SUSE bug 1013893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015173">SUSE bug 1015173</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334188" comment="bluez is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790331" comment="libbluetooth3-5.48-5.13.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790334" comment="bluez-cups-5.48-5.13.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334188" comment="bluez is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335460" comment="bluez-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335459" comment="libbluetooth3 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790332" comment="bluez-5.48-5.13.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790333" comment="bluez-devel-5.48-5.13.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169921" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9921</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9921" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9921" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9921" ref_url="https://www.suse.com/security/cve/CVE-2016-9921" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0571-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9921/">CVE-2016-9921</cve>
	<bugzilla href="https://bugzilla.suse.com/1014702">SUSE bug 1014702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015169">SUSE bug 1015169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9922</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9922" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9922" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9922" ref_url="https://www.suse.com/security/cve/CVE-2016-9922" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0571-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9922/">CVE-2016-9922</cve>
	<bugzilla href="https://bugzilla.suse.com/1014702">SUSE bug 1014702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015169">SUSE bug 1015169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9923</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9923" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9923" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9923" ref_url="https://www.suse.com/security/cve/CVE-2016-9923" source="SUSE CVE"/>
    <description>
    Quick Emulator (Qemu) built with the 'chardev' backend support is vulnerable to a use after free issue. It could occur while hotplug and unplugging the device in the guest. A guest user/process could use this flaw to crash a Qemu process on the host resulting in DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9923/">CVE-2016-9923</cve>
	<bugzilla href="https://bugzilla.suse.com/1014703">SUSE bug 1014703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015145">SUSE bug 1015145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015148">SUSE bug 1015148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015154">SUSE bug 1015154</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169932" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9932</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9932" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9932" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9932" ref_url="https://www.suse.com/security/cve/CVE-2016-9932" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3221-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00003.html" source="SUSE-SU"/>
    <description>
    CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9932/">CVE-2016-9932</cve>
	<bugzilla href="https://bugzilla.suse.com/1012651">SUSE bug 1012651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1016340">SUSE bug 1016340</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9939</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9939" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9939" ref_url="https://www.suse.com/security/cve/CVE-2016-9939" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009547.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3301-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OT7AMKZYZG3NMSSJK4GVQCGFPLIGSKD5/" source="SUSE-SU"/>
    <description>
    Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding routine. The library will allocate a memory block based on the length field of the ASN.1 object. If there is not enough content octets in the ASN.1 object, then the function will fail and the memory block will be zeroed even if its unused. There is a noticeable delay during the wipe for a large allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9939/">CVE-2016-9939</cve>
	<bugzilla href="https://bugzilla.suse.com/1015243">SUSE bug 1015243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694644" comment="libcryptopp is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009685125" comment="libcryptopp-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009685126" comment="libcryptopp5_6_5 is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9957</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9957" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9957" ref_url="https://www.suse.com/security/cve/CVE-2016-9957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in game-music-emu before 0.6.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9957/">CVE-2016-9957</cve>
	<bugzilla href="https://bugzilla.suse.com/1015941">SUSE bug 1015941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482784" comment="libgme-devel-0.6.2-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482785" comment="libgme0-0.6.2-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9958</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9958" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9958" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9958" ref_url="https://www.suse.com/security/cve/CVE-2016-9958" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html" source="SUSE-SU"/>
    <description>
    game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9958/">CVE-2016-9958</cve>
	<bugzilla href="https://bugzilla.suse.com/1015941">SUSE bug 1015941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482784" comment="libgme-devel-0.6.2-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482785" comment="libgme0-0.6.2-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9959</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9959" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9959" ref_url="https://www.suse.com/security/cve/CVE-2016-9959" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html" source="SUSE-SU"/>
    <description>
    game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9959/">CVE-2016-9959</cve>
	<bugzilla href="https://bugzilla.suse.com/1015941">SUSE bug 1015941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482784" comment="libgme-devel-0.6.2-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482785" comment="libgme0-0.6.2-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9960</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9960" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9960" ref_url="https://www.suse.com/security/cve/CVE-2016-9960" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html" source="SUSE-SU"/>
    <description>
    game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9960/">CVE-2016-9960</cve>
	<bugzilla href="https://bugzilla.suse.com/1015941">SUSE bug 1015941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482784" comment="libgme-devel-0.6.2-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482785" comment="libgme0-0.6.2-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9961</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9961" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9961" ref_url="https://www.suse.com/security/cve/CVE-2016-9961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:3250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html" source="SUSE-SU"/>
    <description>
    game-music-emu before 0.6.1 mishandles unspecified integer values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9961/">CVE-2016-9961</cve>
	<bugzilla href="https://bugzilla.suse.com/1015941">SUSE bug 1015941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482784" comment="libgme-devel-0.6.2-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482785" comment="libgme0-0.6.2-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9962</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9962" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9962" ref_url="https://www.suse.com/security/cve/CVE-2016-9962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1964-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005178.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1966-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00093.html" source="SUSE-SU"/>
    <description>
    RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container.  This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9962/">CVE-2016-9962</cve>
	<bugzilla href="https://bugzilla.suse.com/1012568">SUSE bug 1012568</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173425">SUSE bug 1173425</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482587" comment="containerd-1.2.2-5.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482591" comment="docker-runc-1.0.0rc6+gitr3748_96ec2177ae84-6.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482592" comment="runc-1.0.0~rc6-1.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9964</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9964" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9964" ref_url="https://www.suse.com/security/cve/CVE-2016-9964" source="SUSE CVE"/>
    <description>
    redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9964/">CVE-2016-9964</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486537" comment="python3-bottle-0.12.13-1.26 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9969</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2016-9969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9969" source="CVE"/>
    <reference ref_id="SUSE CVE-2016-9969" ref_url="https://www.suse.com/security/cve/CVE-2016-9969" source="SUSE CVE"/>
    <description>
    In libwebp 0.5.1, there is a double free bug in libwebpmux.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9969/">CVE-2016-9969</cve>
	<bugzilla href="https://bugzilla.suse.com/1136199">SUSE bug 1136199</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726872" comment="libwebp6-32bit is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009353564" comment="libwebp-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655541" comment="libwebp6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726872" comment="libwebp6-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009714939" comment="libwebpdecoder2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726873" comment="libwebpdecoder2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009353563" comment="libwebpdemux2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726874" comment="libwebpdemux2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009714940" comment="libwebpextras0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726875" comment="libwebpextras0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009714941" comment="libwebpmux2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726876" comment="libwebpmux2-32bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0379</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-0379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0379" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-0379" ref_url="https://www.suse.com/security/cve/CVE-2017-0379" source="SUSE CVE"/>
    <description>
    Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-0379/">CVE-2017-0379</cve>
	<bugzilla href="https://bugzilla.suse.com/1055837">SUSE bug 1055837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481367" comment="libgcrypt-devel-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481368" comment="libgcrypt20-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481369" comment="libgcrypt20-32bit-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481370" comment="libgcrypt20-hmac-1.8.2-6.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481371" comment="libgcrypt20-hmac-32bit-1.8.2-6.7 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0381</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-0381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0381" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-0381" ref_url="https://www.suse.com/security/cve/CVE-2017-0381" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00031.html" source="SUSE-SU"/>
    <description>
    An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31607432.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-0381/">CVE-2017-0381</cve>
	<bugzilla href="https://bugzilla.suse.com/1020102">SUSE bug 1020102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480649" comment="libopus0-1.2.1-1.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486484" comment="libopus-devel-1.2.1-1.29 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0386</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-0386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0386" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-0386" ref_url="https://www.suse.com/security/cve/CVE-2017-0386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012179.html" source="SUSE-SU"/>
    <description>
    An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32255299.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-0386/">CVE-2017-0386</cve>
	<bugzilla href="https://bugzilla.suse.com/1020123">SUSE bug 1020123</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009654583" comment="libnl-config is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654584" comment="libnl3-200 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654585" comment="libnl3-200-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654586" comment="libnl3-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0641</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-0641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0641" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-0641" ref_url="https://www.suse.com/security/cve/CVE-2017-0641" source="SUSE CVE"/>
    <description>
    A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34360591.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-0641/">CVE-2017-0641</cve>
	<bugzilla href="https://bugzilla.suse.com/1056539">SUSE bug 1056539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480779" comment="libvpx4-1.6.1-4.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486513" comment="libvpx-devel-1.6.1-4.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0663</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-0663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-0663" ref_url="https://www.suse.com/security/cve/CVE-2017-0663" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1746-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00000.html" source="SUSE-SU"/>
    <description>
    A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-0663/">CVE-2017-0663</cve>
	<bugzilla href="https://bugzilla.suse.com/1044337">SUSE bug 1044337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0898</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-0898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0898" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-0898" ref_url="https://www.suse.com/security/cve/CVE-2017-0898" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
    <description>
    Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) with a huge minus value. Such situation can lead to a buffer overrun, resulting in a heap memory corruption or an information disclosure from the heap.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-0898/">CVE-2017-0898</cve>
	<bugzilla href="https://bugzilla.suse.com/1058755">SUSE bug 1058755</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000050</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000050" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000050" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000050" ref_url="https://www.suse.com/security/cve/CVE-2017-1000050" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1960-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00092.html" source="SUSE-SU"/>
    <description>
    JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000050/">CVE-2017-1000050</cve>
	<bugzilla href="https://bugzilla.suse.com/1047958">SUSE bug 1047958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078851">SUSE bug 1078851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000082</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000082" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000082" ref_url="https://www.suse.com/security/cve/CVE-2017-1000082" source="SUSE CVE"/>
    <description>
    systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with root privileges rather than the user intended.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000082/">CVE-2017-1000082</cve>
	<bugzilla href="https://bugzilla.suse.com/1047023">SUSE bug 1047023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172483">SUSE bug 1172483</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336434" comment="libsystemd0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336435" comment="libsystemd0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335316" comment="libudev-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335309" comment="libudev1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335310" comment="libudev1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334001" comment="systemd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335311" comment="systemd-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335312" comment="systemd-bash-completion is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624596" comment="systemd-container is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624597" comment="systemd-coredump is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335317" comment="systemd-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335313" comment="systemd-sysvinit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335314" comment="udev is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000083</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000083" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000083" ref_url="https://www.suse.com/security/cve/CVE-2017-1000083" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1893-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3428-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00090.html" source="SUSE-SU"/>
    <description>
    backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000083/">CVE-2017-1000083</cve>
	<bugzilla href="https://bugzilla.suse.com/1046856">SUSE bug 1046856</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482660" comment="evince-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482661" comment="evince-devel-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482662" comment="evince-lang-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482663" comment="evince-plugin-djvudocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482664" comment="evince-plugin-dvidocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482665" comment="evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482666" comment="evince-plugin-psdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482667" comment="evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482668" comment="evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482669" comment="libevdocument3-4-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482670" comment="libevview3-3-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482671" comment="nautilus-evince-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482672" comment="typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-2.41 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482673" comment="typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-2.41 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000099</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000099" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000099" ref_url="https://www.suse.com/security/cve/CVE-2017-1000099" source="SUSE CVE"/>
    <description>
    When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. The code doing this would send the wrong buffer to the user (stdout or the application's provide callback), which could lead to other private data from the heap to get inadvertently displayed. The wrong buffer was an uninitialized memory area allocated on the heap and if it turned out to not contain any zero byte, it would continue and display the data following that buffer in memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000099/">CVE-2017-1000099</cve>
	<bugzilla href="https://bugzilla.suse.com/1051645">SUSE bug 1051645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000100</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000100" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000100" ref_url="https://www.suse.com/security/cve/CVE-2017-1000100" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2354-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00080.html" source="SUSE-SU"/>
    <description>
    When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn't restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl's redirect protocols with --proto-redir and libcurl's with CURLOPT_REDIR_PROTOCOLS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-11"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000100/">CVE-2017-1000100</cve>
	<bugzilla href="https://bugzilla.suse.com/1051644">SUSE bug 1051644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000101</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000101" ref_url="https://www.suse.com/security/cve/CVE-2017-1000101" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00080.html" source="SUSE-SU"/>
    <description>
    curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000101/">CVE-2017-1000101</cve>
	<bugzilla href="https://bugzilla.suse.com/1051643">SUSE bug 1051643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000117</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000117" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000117" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000117" ref_url="https://www.suse.com/security/cve/CVE-2017-1000117" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2225-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006709.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00004.html" source="SUSE-SU"/>
    <description>
    A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000117/">CVE-2017-1000117</cve>
	<bugzilla href="https://bugzilla.suse.com/1052481">SUSE bug 1052481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052696">SUSE bug 1052696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052932">SUSE bug 1052932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053364">SUSE bug 1053364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053600">SUSE bug 1053600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054653">SUSE bug 1054653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058214">SUSE bug 1058214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066430">SUSE bug 1066430</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071709">SUSE bug 1071709</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481138" comment="git-core-2.16.4-3.9.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487750" comment="git-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487751" comment="git-arch-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487752" comment="git-cvs-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487753" comment="git-daemon-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487754" comment="git-doc-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487755" comment="git-email-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487756" comment="git-gui-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487757" comment="git-svn-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487758" comment="git-web-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487759" comment="gitk-2.16.4-3.9.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000121</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000121" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000121" ref_url="https://www.suse.com/security/cve/CVE-2017-1000121" source="SUSE CVE"/>
    <description>
    The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect Apple products.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000121/">CVE-2017-1000121</cve>
	<bugzilla href="https://bugzilla.suse.com/1078996">SUSE bug 1078996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000122</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000122" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000122" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000122" ref_url="https://www.suse.com/security/cve/CVE-2017-1000122" source="SUSE CVE"/>
    <description>
    The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service (release assertion) of the UI process. This vulnerability does not affect Apple products.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000122/">CVE-2017-1000122</cve>
	<bugzilla href="https://bugzilla.suse.com/1078994">SUSE bug 1078994</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334506" comment="webkit2gtk3 is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335631" comment="libjavascriptcoregtk-4_0-18 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335632" comment="libwebkit2gtk-4_0-37 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335633" comment="libwebkit2gtk3-lang is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335634" comment="typelib-1_0-JavaScriptCore-4_0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335635" comment="typelib-1_0-WebKit2-4_0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336459" comment="typelib-1_0-WebKit2WebExtension-4_0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335636" comment="webkit2gtk-4_0-injected-bundles is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336460" comment="webkit2gtk3-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000126</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000126" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000126" ref_url="https://www.suse.com/security/cve/CVE-2017-1000126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html" source="SUSE-SU"/>
    <description>
    exiv2 0.26 contains a Stack out of bounds read in webp parser
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000126/">CVE-2017-1000126</cve>
	<bugzilla href="https://bugzilla.suse.com/1068873">SUSE bug 1068873</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009495609" comment="libexiv2-26-0.26-6.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495610" comment="libexiv2-devel-0.26-6.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000158</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000158" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000158" ref_url="https://www.suse.com/security/cve/CVE-2017-1000158" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0768-1" ref_url="https://www.suse.com/support/update/announcement/2018/suse-su-20180768-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1415-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00098.html" source="SUSE-SU"/>
    <description>
    CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000158/">CVE-2017-1000158</cve>
	<bugzilla href="https://bugzilla.suse.com/1068664">SUSE bug 1068664</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000231</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000231" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000231" ref_url="https://www.suse.com/security/cve/CVE-2017-1000231" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006645.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00000.html" source="SUSE-SU"/>
    <description>
    A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000231/">CVE-2017-1000231</cve>
	<bugzilla href="https://bugzilla.suse.com/1068711">SUSE bug 1068711</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496424" comment="perl-DNS-LDNS-1.7.0-4.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009493063" comment="ldns-devel-1.7.0-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009493064" comment="libldns2-1.7.0-4.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000232</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000232" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000232" ref_url="https://www.suse.com/security/cve/CVE-2017-1000232" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006645.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00000.html" source="SUSE-SU"/>
    <description>
    A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000232/">CVE-2017-1000232</cve>
	<bugzilla href="https://bugzilla.suse.com/1068709">SUSE bug 1068709</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496424" comment="perl-DNS-LDNS-1.7.0-4.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009493063" comment="ldns-devel-1.7.0-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009493064" comment="libldns2-1.7.0-4.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000249</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000249" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000249" ref_url="https://www.suse.com/security/cve/CVE-2017-1000249" source="SUSE CVE"/>
    <description>
    An issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016) lets an attacker overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary. This was fixed in commit 35c94dc6acc418f1ad7f6241a6680e5327495793 (Aug 2017).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000249/">CVE-2017-1000249</cve>
	<bugzilla href="https://bugzilla.suse.com/1056838">SUSE bug 1056838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481116" comment="file-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481117" comment="file-devel-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481118" comment="file-magic-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481119" comment="libmagic1-5.32-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481120" comment="libmagic1-32bit-5.32-7.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000250</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000250" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000250" ref_url="https://www.suse.com/security/cve/CVE-2017-1000250" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005161.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2810-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00069.html" source="SUSE-SU"/>
    <description>
    All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-06-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000250/">CVE-2017-1000250</cve>
	<bugzilla href="https://bugzilla.suse.com/1057342">SUSE bug 1057342</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334185" comment="bluez is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336475" comment="bluez-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336474" comment="libbluetooth3 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000251</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000251" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000251" ref_url="https://www.suse.com/security/cve/CVE-2017-1000251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2534-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2548-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2772-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2779-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2783-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2784-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2787-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2792-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2794-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2796-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2798-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2799-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2800-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2802-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2803-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2804-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2805-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2806-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2809-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2811-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2816-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="TID000019028" ref_url="https://www.suse.com/support/kb/doc/?id=000019028" source="SUSE-SU"/>
		<reference ref_id="TID7021383" ref_url="https://www.suse.com/support/kb/doc/?id=7021383" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2495-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00057.html" source="SUSE-SU"/>
    <description>
    The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000251/">CVE-2017-1000251</cve>
	<bugzilla href="https://bugzilla.suse.com/1057389">SUSE bug 1057389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057950">SUSE bug 1057950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070535">SUSE bug 1070535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072162">SUSE bug 1072162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120758">SUSE bug 1120758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000252</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000252" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000252" ref_url="https://www.suse.com/security/cve/CVE-2017-1000252" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2739-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2741-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00019.html" source="SUSE-SU"/>
    <description>
    The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or crash) via an out-of bounds guest_irq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000252/">CVE-2017-1000252</cve>
	<bugzilla href="https://bugzilla.suse.com/1058038">SUSE bug 1058038</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000254</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000254" ref_url="https://www.suse.com/security/cve/CVE-2017-1000254" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003326.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003464.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003630.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2880-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00098.html" source="SUSE-SU"/>
    <description>
    libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000254/">CVE-2017-1000254</cve>
	<bugzilla href="https://bugzilla.suse.com/1061876">SUSE bug 1061876</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000255</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000255" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000255" ref_url="https://www.suse.com/security/cve/CVE-2017-1000255" source="SUSE CVE"/>
    <description>
    On Linux running on PowerPC hardware (Power8 or later) a user process can craft a signal frame and then do a sigreturn so that the kernel will take an exception (interrupt), and use the r1 value *from the signal frame* as the kernel stack pointer. As part of the exception entry the content of the signal frame is written to the kernel stack, allowing an attacker to overwrite arbitrary locations with arbitrary values. The exception handling does produce an oops, and a panic if panic_on_oops=1, but only after kernel memory has been over written. This flaw was introduced in commit: "5d176f751ee3 (powerpc: tm: Enable transactional memory (TM) lazily for userspace)" which was merged upstream into v4.9-rc1. Please note that kernels built with CONFIG_PPC_TRANSACTIONAL_MEM=n are not vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000255/">CVE-2017-1000255</cve>
	<bugzilla href="https://bugzilla.suse.com/1061633">SUSE bug 1061633</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000256</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000256" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000256" ref_url="https://www.suse.com/security/cve/CVE-2017-1000256" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003354.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2878-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00096.html" source="SUSE-SU"/>
    <description>
    libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000256/">CVE-2017-1000256</cve>
	<bugzilla href="https://bugzilla.suse.com/1062563">SUSE bug 1062563</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481528" comment="libvirt-libs-5.1.0-6.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488366" comment="libvirt-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488367" comment="libvirt-admin-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488368" comment="libvirt-bash-completion-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488369" comment="libvirt-client-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488370" comment="libvirt-daemon-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488371" comment="libvirt-daemon-config-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488372" comment="libvirt-daemon-config-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488373" comment="libvirt-daemon-driver-interface-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488374" comment="libvirt-daemon-driver-libxl-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488375" comment="libvirt-daemon-driver-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488376" comment="libvirt-daemon-driver-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488377" comment="libvirt-daemon-driver-nodedev-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488378" comment="libvirt-daemon-driver-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488379" comment="libvirt-daemon-driver-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488380" comment="libvirt-daemon-driver-secret-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488381" comment="libvirt-daemon-driver-storage-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488382" comment="libvirt-daemon-driver-storage-core-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488383" comment="libvirt-daemon-driver-storage-disk-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488384" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488385" comment="libvirt-daemon-driver-storage-logical-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488386" comment="libvirt-daemon-driver-storage-mpath-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488387" comment="libvirt-daemon-driver-storage-rbd-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488388" comment="libvirt-daemon-driver-storage-scsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488389" comment="libvirt-daemon-hooks-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488390" comment="libvirt-daemon-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488391" comment="libvirt-daemon-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488392" comment="libvirt-daemon-xen-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488393" comment="libvirt-devel-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488394" comment="libvirt-doc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488395" comment="libvirt-lock-sanlock-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488396" comment="libvirt-nss-5.1.0-6.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000257" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000257</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000257" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000257" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000257" ref_url="https://www.suse.com/security/cve/CVE-2017-1000257" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003359.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2880-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00098.html" source="SUSE-SU"/>
    <description>
    An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl's deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000257/">CVE-2017-1000257</cve>
	<bugzilla href="https://bugzilla.suse.com/1063824">SUSE bug 1063824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000366" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000366</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000366" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000366" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000366" ref_url="https://www.suse.com/security/cve/CVE-2017-1000366" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1614-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1621-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="TID7020973" ref_url="https://www.suse.com/support/kb/doc/?id=7020973" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1629-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00024.html" source="SUSE-SU"/>
    <description>
    glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000366/">CVE-2017-1000366</cve>
	<bugzilla href="https://bugzilla.suse.com/1037551">SUSE bug 1037551</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039357">SUSE bug 1039357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071319">SUSE bug 1071319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000367</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000367" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000367" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000367" ref_url="https://www.suse.com/security/cve/CVE-2017-1000367" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00079.html" source="SUSE-SU"/>
    <description>
    Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-23"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000367/">CVE-2017-1000367</cve>
	<bugzilla href="https://bugzilla.suse.com/1007501">SUSE bug 1007501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039361">SUSE bug 1039361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042146">SUSE bug 1042146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077345">SUSE bug 1077345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481659" comment="sudo-1.8.22-4.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481660" comment="sudo-devel-1.8.22-4.3.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000368</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000368" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000368" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000368" ref_url="https://www.suse.com/security/cve/CVE-2017-1000368" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1626-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="TID7021027" ref_url="https://www.suse.com/support/kb/doc/?id=7021027" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00034.html" source="SUSE-SU"/>
    <description>
    Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in information disclosure and command execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000368/">CVE-2017-1000368</cve>
	<bugzilla href="https://bugzilla.suse.com/1039361">SUSE bug 1039361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042146">SUSE bug 1042146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1045986">SUSE bug 1045986</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481659" comment="sudo-1.8.22-4.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481660" comment="sudo-devel-1.8.22-4.3.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000370</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000370" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000370" ref_url="https://www.suse.com/security/cve/CVE-2017-1000370" source="SUSE CVE"/>
    <description>
    The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed with 1GB of arguments or environmental strings then the stack occupies the address 0x80000000 and the PIE binary is mapped above 0x40000000 nullifying the protection of the offset2lib patch. This affects Linux Kernel version 4.11.5 and earlier. This is a different issue than CVE-2017-1000371. This issue appears to be limited to i386 based systems.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000370/">CVE-2017-1000370</cve>
	<bugzilla href="https://bugzilla.suse.com/1037551">SUSE bug 1037551</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039346">SUSE bug 1039346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039349">SUSE bug 1039349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039354">SUSE bug 1039354</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000371</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000371" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000371" ref_url="https://www.suse.com/security/cve/CVE-2017-1000371" source="SUSE CVE"/>
    <description>
    The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2017-1000370 and CVE-2017-1000365. This issue appears to be limited to i386 based systems.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000371/">CVE-2017-1000371</cve>
	<bugzilla href="https://bugzilla.suse.com/1037551">SUSE bug 1037551</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039346">SUSE bug 1039346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039349">SUSE bug 1039349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1039354">SUSE bug 1039354</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000380</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000380" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000380" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000380" ref_url="https://www.suse.com/security/cve/CVE-2017-1000380" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2342-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00026.html" source="SUSE-SU"/>
    <description>
    sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000380/">CVE-2017-1000380</cve>
	<bugzilla href="https://bugzilla.suse.com/1044125">SUSE bug 1044125</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000381</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000381" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000381" ref_url="https://www.suse.com/security/cve/CVE-2017-1000381" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1857-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2179-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00061.html" source="SUSE-SU"/>
    <description>
    The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000381/">CVE-2017-1000381</cve>
	<bugzilla href="https://bugzilla.suse.com/1044946">SUSE bug 1044946</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480113" comment="c-ares-devel-1.14.0-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480114" comment="libcares2-1.14.0-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000382</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000382" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000382" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000382" ref_url="https://www.suse.com/security/cve/CVE-2017-1000382" source="SUSE CVE"/>
    <description>
    VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000382/">CVE-2017-1000382</cve>
	<bugzilla href="https://bugzilla.suse.com/1065958">SUSE bug 1065958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070955">SUSE bug 1070955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482738" comment="gvim-8.0.1568-3.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480954" comment="vim-8.0.1568-3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480955" comment="vim-data-8.0.1568-3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480956" comment="vim-data-common-8.0.1568-3.20 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000405</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000405" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000405" ref_url="https://www.suse.com/security/cve/CVE-2017-1000405" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3225-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3284-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3286-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3297-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3317-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3400-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007816.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() can be reached by get_user_pages(). In such case, the pmd will become dirty. This scenario breaks the new can_follow_write_pmd()'s logic - pmd can become dirty without going through a COW cycle. This bug is not as severe as the original "Dirty cow" because an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it does allow us to overwrite read-only huge pages. For example, the zero huge page and sealed shmem files can be overwritten (since their mapping can be populated using THP). Note that after the first write page-fault to the zero page, it will be replaced with a new fresh (and zeroed) thp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.7/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000405/">CVE-2017-1000405</cve>
	<bugzilla href="https://bugzilla.suse.com/1069496">SUSE bug 1069496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070307">SUSE bug 1070307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497521" comment="kernel-livepatch-4_12_14-197_26-default-8-2.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000408</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000408" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000408" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000408" ref_url="https://www.suse.com/security/cve/CVE-2017-1000408" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
    <description>
    A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000408/">CVE-2017-1000408</cve>
	<bugzilla href="https://bugzilla.suse.com/1039357">SUSE bug 1039357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071319">SUSE bug 1071319</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000409</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000409" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000409" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000409" ref_url="https://www.suse.com/security/cve/CVE-2017-1000409" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
    <description>
    A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-06"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000409/">CVE-2017-1000409</cve>
	<bugzilla href="https://bugzilla.suse.com/1071319">SUSE bug 1071319</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000410</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1000410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000410" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1000410" ref_url="https://www.suse.com/security/cve/CVE-2017-1000410" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their uninitialized state. By manipulating the code flows that precede the handling of these configuration messages, an attacker can also gain some control over which data will be held in the uninitialized stack variables. This can allow him to bypass KASLR, and stack canaries protection - as both pointers and stack canaries may be leaked in this manner. Combining this vulnerability (for example) with the previously disclosed RCE vulnerability in L2CAP configuration parsing (CVE-2017-1000251) may allow an attacker to exploit the RCE against kernels which were built with the above mitigations. These are the specifics of this vulnerability: In the function l2cap_parse_conf_rsp and in the function l2cap_parse_conf_req the following variable is declared without initialization: struct l2cap_conf_efs efs; In addition, when parsing input configuration parameters in both of these functions, the switch case for handling EFS elements may skip the memcpy call that will write to the efs variable: ... case L2CAP_CONF_EFS: if (olen == sizeof(efs)) memcpy(&amp;efs, (void *)val, olen); ... The olen in the above if is attacker controlled, and regardless of that if, in both of these functions the efs variable would eventually be added to the outgoing configuration request that is being built: l2cap_add_conf_opt(&amp;ptr, L2CAP_CONF_EFS, sizeof(efs), (unsigned long) &amp;efs); So by sending a configuration request, or response, that contains an L2CAP_CONF_EFS element, but with an element length that is not sizeof(efs) - the memcpy to the uninitialized efs variable can be avoided, and the uninitialized variable would be returned to the attacker (16 bytes).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.4/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000410/">CVE-2017-1000410</cve>
	<bugzilla href="https://bugzilla.suse.com/1070535">SUSE bug 1070535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171002101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1002101</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1002101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1002101" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1002101" ref_url="https://www.suse.com/security/cve/CVE-2017-1002101" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003825.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html" source="SUSE-SU"/>
    <description>
    In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1002101/">CVE-2017-1002101</cve>
	<bugzilla href="https://bugzilla.suse.com/1084923">SUSE bug 1084923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085007">SUSE bug 1085007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085009">SUSE bug 1085009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096726">SUSE bug 1096726</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334435" comment="docker is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348338" comment="docker-bash-completion is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10053</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10053" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10053" ref_url="https://www.suse.com/security/cve/CVE-2017-10053" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10053/">CVE-2017-10053</cve>
	<bugzilla href="https://bugzilla.suse.com/1049305">SUSE bug 1049305</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10067</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10067" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10067" ref_url="https://www.suse.com/security/cve/CVE-2017-10067" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10067/">CVE-2017-10067</cve>
	<bugzilla href="https://bugzilla.suse.com/1049306">SUSE bug 1049306</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10074</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10074" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10074" ref_url="https://www.suse.com/security/cve/CVE-2017-10074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10074/">CVE-2017-10074</cve>
	<bugzilla href="https://bugzilla.suse.com/1049307">SUSE bug 1049307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10078</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10078" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10078" ref_url="https://www.suse.com/security/cve/CVE-2017-10078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-10078/">CVE-2017-10078</cve>
	<bugzilla href="https://bugzilla.suse.com/1049308">SUSE bug 1049308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10081</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10081" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10081" ref_url="https://www.suse.com/security/cve/CVE-2017-10081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-10081/">CVE-2017-10081</cve>
	<bugzilla href="https://bugzilla.suse.com/1049309">SUSE bug 1049309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10086</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10086" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10086" ref_url="https://www.suse.com/security/cve/CVE-2017-10086" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10086/">CVE-2017-10086</cve>
	<bugzilla href="https://bugzilla.suse.com/1049310">SUSE bug 1049310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10087</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10087" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10087" ref_url="https://www.suse.com/security/cve/CVE-2017-10087" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10087/">CVE-2017-10087</cve>
	<bugzilla href="https://bugzilla.suse.com/1049311">SUSE bug 1049311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10089</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10089" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10089" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10089" ref_url="https://www.suse.com/security/cve/CVE-2017-10089" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10089/">CVE-2017-10089</cve>
	<bugzilla href="https://bugzilla.suse.com/1049312">SUSE bug 1049312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10090</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10090" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10090" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10090" ref_url="https://www.suse.com/security/cve/CVE-2017-10090" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10090/">CVE-2017-10090</cve>
	<bugzilla href="https://bugzilla.suse.com/1049313">SUSE bug 1049313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10096</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10096" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10096" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10096" ref_url="https://www.suse.com/security/cve/CVE-2017-10096" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10096/">CVE-2017-10096</cve>
	<bugzilla href="https://bugzilla.suse.com/1049314">SUSE bug 1049314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10101</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10101" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10101" ref_url="https://www.suse.com/security/cve/CVE-2017-10101" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10101/">CVE-2017-10101</cve>
	<bugzilla href="https://bugzilla.suse.com/1049315">SUSE bug 1049315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10102</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10102" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10102" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10102" ref_url="https://www.suse.com/security/cve/CVE-2017-10102" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10102/">CVE-2017-10102</cve>
	<bugzilla href="https://bugzilla.suse.com/1049316">SUSE bug 1049316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10105</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10105" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10105" ref_url="https://www.suse.com/security/cve/CVE-2017-10105" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-10105/">CVE-2017-10105</cve>
	<bugzilla href="https://bugzilla.suse.com/1049317">SUSE bug 1049317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10107</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10107" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10107" ref_url="https://www.suse.com/security/cve/CVE-2017-10107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10107/">CVE-2017-10107</cve>
	<bugzilla href="https://bugzilla.suse.com/1049318">SUSE bug 1049318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10108</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10108" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10108" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10108" ref_url="https://www.suse.com/security/cve/CVE-2017-10108" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10108/">CVE-2017-10108</cve>
	<bugzilla href="https://bugzilla.suse.com/1049319">SUSE bug 1049319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10109</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10109" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10109" ref_url="https://www.suse.com/security/cve/CVE-2017-10109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10109/">CVE-2017-10109</cve>
	<bugzilla href="https://bugzilla.suse.com/1049320">SUSE bug 1049320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10110</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10110" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10110" ref_url="https://www.suse.com/security/cve/CVE-2017-10110" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10110/">CVE-2017-10110</cve>
	<bugzilla href="https://bugzilla.suse.com/1049321">SUSE bug 1049321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10111</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10111" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10111" ref_url="https://www.suse.com/security/cve/CVE-2017-10111" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10111/">CVE-2017-10111</cve>
	<bugzilla href="https://bugzilla.suse.com/1049322">SUSE bug 1049322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10114</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10114" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10114" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10114" ref_url="https://www.suse.com/security/cve/CVE-2017-10114" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10114/">CVE-2017-10114</cve>
	<bugzilla href="https://bugzilla.suse.com/1049323">SUSE bug 1049323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10115</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10115" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10115" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10115" ref_url="https://www.suse.com/security/cve/CVE-2017-10115" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10115/">CVE-2017-10115</cve>
	<bugzilla href="https://bugzilla.suse.com/1049324">SUSE bug 1049324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10116</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10116" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10116" ref_url="https://www.suse.com/security/cve/CVE-2017-10116" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10116/">CVE-2017-10116</cve>
	<bugzilla href="https://bugzilla.suse.com/1049325">SUSE bug 1049325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10118</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10118" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10118" ref_url="https://www.suse.com/security/cve/CVE-2017-10118" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10118/">CVE-2017-10118</cve>
	<bugzilla href="https://bugzilla.suse.com/1049326">SUSE bug 1049326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10125</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10125" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10125" ref_url="https://www.suse.com/security/cve/CVE-2017-10125" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to deployment of Java where the Java Auto Update is enabled. CVSS 3.0 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10125/">CVE-2017-10125</cve>
	<bugzilla href="https://bugzilla.suse.com/1049327">SUSE bug 1049327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10135</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10135" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10135" ref_url="https://www.suse.com/security/cve/CVE-2017-10135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10135/">CVE-2017-10135</cve>
	<bugzilla href="https://bugzilla.suse.com/1049328">SUSE bug 1049328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10176</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10176" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10176" ref_url="https://www.suse.com/security/cve/CVE-2017-10176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10176/">CVE-2017-10176</cve>
	<bugzilla href="https://bugzilla.suse.com/1049329">SUSE bug 1049329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10193</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10193" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10193" ref_url="https://www.suse.com/security/cve/CVE-2017-10193" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10193/">CVE-2017-10193</cve>
	<bugzilla href="https://bugzilla.suse.com/1049330">SUSE bug 1049330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10198</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10198" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10198" ref_url="https://www.suse.com/security/cve/CVE-2017-10198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10198/">CVE-2017-10198</cve>
	<bugzilla href="https://bugzilla.suse.com/1049331">SUSE bug 1049331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10243</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10243" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10243" ref_url="https://www.suse.com/security/cve/CVE-2017-10243" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10243/">CVE-2017-10243</cve>
	<bugzilla href="https://bugzilla.suse.com/1049332">SUSE bug 1049332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049333">SUSE bug 1049333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10268</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10268" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10268" ref_url="https://www.suse.com/security/cve/CVE-2017-10268" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003712.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0400-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00029.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10268/">CVE-2017-10268</cve>
	<bugzilla href="https://bugzilla.suse.com/1064101">SUSE bug 1064101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076505">SUSE bug 1076505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10274</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10274" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10274" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10274" ref_url="https://www.suse.com/security/cve/CVE-2017-10274" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-10274/">CVE-2017-10274</cve>
	<bugzilla href="https://bugzilla.suse.com/1064071">SUSE bug 1064071</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710281" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10281</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10281" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10281" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10281" ref_url="https://www.suse.com/security/cve/CVE-2017-10281" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10281/">CVE-2017-10281</cve>
	<bugzilla href="https://bugzilla.suse.com/1064072">SUSE bug 1064072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10285</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10285" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10285" ref_url="https://www.suse.com/security/cve/CVE-2017-10285" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10285/">CVE-2017-10285</cve>
	<bugzilla href="https://bugzilla.suse.com/1064073">SUSE bug 1064073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10286</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10286" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10286" ref_url="https://www.suse.com/security/cve/CVE-2017-10286" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00076.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10286/">CVE-2017-10286</cve>
	<bugzilla href="https://bugzilla.suse.com/1064107">SUSE bug 1064107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10293</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10293" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10293" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10293" ref_url="https://www.suse.com/security/cve/CVE-2017-10293" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-10293/">CVE-2017-10293</cve>
	<bugzilla href="https://bugzilla.suse.com/1064074">SUSE bug 1064074</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10295</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10295" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10295" ref_url="https://www.suse.com/security/cve/CVE-2017-10295" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.0 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-10295/">CVE-2017-10295</cve>
	<bugzilla href="https://bugzilla.suse.com/1064075">SUSE bug 1064075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10309</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10309" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10309" ref_url="https://www.suse.com/security/cve/CVE-2017-10309" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-10309/">CVE-2017-10309</cve>
	<bugzilla href="https://bugzilla.suse.com/1064076">SUSE bug 1064076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710320" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10320</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10320" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10320" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10320" ref_url="https://www.suse.com/security/cve/CVE-2017-10320" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10320/">CVE-2017-10320</cve>
	<bugzilla href="https://bugzilla.suse.com/1064113">SUSE bug 1064113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10345</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10345" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10345" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10345" ref_url="https://www.suse.com/security/cve/CVE-2017-10345" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10345/">CVE-2017-10345</cve>
	<bugzilla href="https://bugzilla.suse.com/1064077">SUSE bug 1064077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10346</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10346" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10346" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10346" ref_url="https://www.suse.com/security/cve/CVE-2017-10346" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10346/">CVE-2017-10346</cve>
	<bugzilla href="https://bugzilla.suse.com/1064078">SUSE bug 1064078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10347</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10347" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10347" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10347" ref_url="https://www.suse.com/security/cve/CVE-2017-10347" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10347/">CVE-2017-10347</cve>
	<bugzilla href="https://bugzilla.suse.com/1064079">SUSE bug 1064079</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10348</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10348" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10348" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10348" ref_url="https://www.suse.com/security/cve/CVE-2017-10348" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10348/">CVE-2017-10348</cve>
	<bugzilla href="https://bugzilla.suse.com/1064080">SUSE bug 1064080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10349</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10349" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10349" ref_url="https://www.suse.com/security/cve/CVE-2017-10349" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10349/">CVE-2017-10349</cve>
	<bugzilla href="https://bugzilla.suse.com/1064081">SUSE bug 1064081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10350</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10350" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10350" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10350" ref_url="https://www.suse.com/security/cve/CVE-2017-10350" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10350/">CVE-2017-10350</cve>
	<bugzilla href="https://bugzilla.suse.com/1064082">SUSE bug 1064082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10355</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10355" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10355" ref_url="https://www.suse.com/security/cve/CVE-2017-10355" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10355/">CVE-2017-10355</cve>
	<bugzilla href="https://bugzilla.suse.com/1064083">SUSE bug 1064083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10356</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10356" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10356" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10356" ref_url="https://www.suse.com/security/cve/CVE-2017-10356" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10356/">CVE-2017-10356</cve>
	<bugzilla href="https://bugzilla.suse.com/1064084">SUSE bug 1064084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710357" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10357</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10357" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10357" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10357" ref_url="https://www.suse.com/security/cve/CVE-2017-10357" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10357/">CVE-2017-10357</cve>
	<bugzilla href="https://bugzilla.suse.com/1064085">SUSE bug 1064085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10365</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10365" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10365" ref_url="https://www.suse.com/security/cve/CVE-2017-10365" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-10365/">CVE-2017-10365</cve>
	<bugzilla href="https://bugzilla.suse.com/1064114">SUSE bug 1064114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10378</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10378" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10378" ref_url="https://www.suse.com/security/cve/CVE-2017-10378" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003712.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0698-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0400-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00029.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10378/">CVE-2017-10378</cve>
	<bugzilla href="https://bugzilla.suse.com/1064115">SUSE bug 1064115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076505">SUSE bug 1076505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10379</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10379" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10379" ref_url="https://www.suse.com/security/cve/CVE-2017-10379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00076.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10379/">CVE-2017-10379</cve>
	<bugzilla href="https://bugzilla.suse.com/1064116">SUSE bug 1064116</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10384</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10384" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10384" ref_url="https://www.suse.com/security/cve/CVE-2017-10384" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00076.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10384/">CVE-2017-10384</cve>
	<bugzilla href="https://bugzilla.suse.com/1064117">SUSE bug 1064117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10388</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10388" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10388" ref_url="https://www.suse.com/security/cve/CVE-2017-10388" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3369-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3440-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0061-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-10388/">CVE-2017-10388</cve>
	<bugzilla href="https://bugzilla.suse.com/1064086">SUSE bug 1064086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070162">SUSE bug 1070162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10661</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10661" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10661" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10661" ref_url="https://www.suse.com/security/cve/CVE-2017-10661" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3286-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3321-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3337-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00073.html" source="SUSE-SU"/>
    <description>
    Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10661/">CVE-2017-10661</cve>
	<bugzilla href="https://bugzilla.suse.com/1053152">SUSE bug 1053152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053153">SUSE bug 1053153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10664</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10664" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10664" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10664" ref_url="https://www.suse.com/security/cve/CVE-2017-10664" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10664/">CVE-2017-10664</cve>
	<bugzilla href="https://bugzilla.suse.com/1046636">SUSE bug 1046636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046637">SUSE bug 1046637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10683</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10683" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10683" ref_url="https://www.suse.com/security/cve/CVE-2017-10683" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2682-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00028.html" source="SUSE-SU"/>
    <description>
    In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10683/">CVE-2017-10683</cve>
	<bugzilla href="https://bugzilla.suse.com/1046766">SUSE bug 1046766</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482308" comment="libmpg123-0-1.25.10-1.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486469" comment="libout123-0-1.25.10-1.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486470" comment="mpg123-1.25.10-1.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486471" comment="mpg123-devel-1.25.10-1.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486472" comment="mpg123-pulse-1.25.10-1.38 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10686</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10686" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10686" ref_url="https://www.suse.com/security/cve/CVE-2017-10686" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2125-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00030.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10686/">CVE-2017-10686</cve>
	<bugzilla href="https://bugzilla.suse.com/1047936">SUSE bug 1047936</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10784</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10784" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10784" ref_url="https://www.suse.com/security/cve/CVE-2017-10784" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
    <description>
    The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-10784/">CVE-2017-10784</cve>
	<bugzilla href="https://bugzilla.suse.com/1058754">SUSE bug 1058754</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348236" comment="libruby2_5-2_5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348228" comment="ruby2.5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348237" comment="ruby2.5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348238" comment="ruby2.5-devel-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348239" comment="ruby2.5-stdlib is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10788</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10788" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10788" ref_url="https://www.suse.com/security/cve/CVE-2017-10788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1463-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00113.html" source="SUSE-SU"/>
    <description>
    The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering (1) certain error responses from a MySQL server or (2) a loss of a network connection to a MySQL server. The use-after-free defect was introduced by relying on incorrect Oracle mysql_stmt_close documentation and code examples.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10788/">CVE-2017-10788</cve>
	<bugzilla href="https://bugzilla.suse.com/1047095">SUSE bug 1047095</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480872" comment="perl-DBD-mysql-4.046-1.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10789</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10789" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10789" ref_url="https://www.suse.com/security/cve/CVE-2017-10789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1450-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1463-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00113.html" source="SUSE-SU"/>
    <description>
    The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a "your communication with the server will be encrypted" statement), which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-10789/">CVE-2017-10789</cve>
	<bugzilla href="https://bugzilla.suse.com/1047059">SUSE bug 1047059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924663">SUSE bug 924663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928962">SUSE bug 928962</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480872" comment="perl-DBD-mysql-4.046-1.13 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10790</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10790" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10790" ref_url="https://www.suse.com/security/cve/CVE-2017-10790" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2825-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004620.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005483.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2854-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2958-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00000.html" source="SUSE-SU"/>
    <description>
    The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-09-12"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10790/">CVE-2017-10790</cve>
	<bugzilla href="https://bugzilla.suse.com/1047002">SUSE bug 1047002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047453">SUSE bug 1047453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790335" comment="gnutls-3.6.2-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790336" comment="libgnutls-devel-3.6.2-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674364" comment="libgnutls30-3.6.2-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790337" comment="libgnutls30-32bit-3.6.2-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790338" comment="libgnutlsxx-devel-3.6.2-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790339" comment="libgnutlsxx28-3.6.2-6.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10806</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10806" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10806" ref_url="https://www.suse.com/security/cve/CVE-2017-10806" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10806/">CVE-2017-10806</cve>
	<bugzilla href="https://bugzilla.suse.com/1047674">SUSE bug 1047674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047675">SUSE bug 1047675</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10911</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10911" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10911" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10911" ref_url="https://www.suse.com/security/cve/CVE-2017-10911" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1795-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka XSA-216.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10911/">CVE-2017-10911</cve>
	<bugzilla href="https://bugzilla.suse.com/1042863">SUSE bug 1042863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1043330">SUSE bug 1043330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057378">SUSE bug 1057378</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333988" comment="qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335414" comment="qemu-arm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336533" comment="qemu-audio-alsa is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336534" comment="qemu-audio-oss is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336535" comment="qemu-audio-pa is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335210" comment="qemu-block-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335211" comment="qemu-block-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335248" comment="qemu-block-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335212" comment="qemu-block-ssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335213" comment="qemu-guest-agent is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335214" comment="qemu-ipxe is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335243" comment="qemu-kvm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335215" comment="qemu-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335244" comment="qemu-seabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335245" comment="qemu-sgabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335217" comment="qemu-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336537" comment="qemu-ui-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336538" comment="qemu-ui-gtk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335218" comment="qemu-vgabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335246" comment="qemu-x86 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10971</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10971" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10971" ref_url="https://www.suse.com/security/cve/CVE-2017-10971" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1850-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1859-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1860-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1885-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00025.html" source="SUSE-SU"/>
    <description>
    In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10971/">CVE-2017-10971</cve>
	<bugzilla href="https://bugzilla.suse.com/1035283">SUSE bug 1035283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047730">SUSE bug 1047730</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487792" comment="xorg-x11-server-sdk-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489170" comment="xorg-x11-server-wayland-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481676" comment="xorg-x11-server-1.20.3-12.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481677" comment="xorg-x11-server-extra-1.20.3-12.29 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10972</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10972" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10972" ref_url="https://www.suse.com/security/cve/CVE-2017-10972" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1850-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1859-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1860-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1885-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00025.html" source="SUSE-SU"/>
    <description>
    Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10972/">CVE-2017-10972</cve>
	<bugzilla href="https://bugzilla.suse.com/1035283">SUSE bug 1035283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047730">SUSE bug 1047730</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487792" comment="xorg-x11-server-sdk-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489170" comment="xorg-x11-server-wayland-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481676" comment="xorg-x11-server-1.20.3-12.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481677" comment="xorg-x11-server-extra-1.20.3-12.29 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10978</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10978" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10978" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10978" ref_url="https://www.suse.com/security/cve/CVE-2017-10978" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003154.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2845-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00087.html" source="SUSE-SU"/>
    <description>
    An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10978/">CVE-2017-10978</cve>
	<bugzilla href="https://bugzilla.suse.com/1049086">SUSE bug 1049086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488329" comment="freeradius-server-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488330" comment="freeradius-server-devel-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488331" comment="freeradius-server-krb5-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488332" comment="freeradius-server-ldap-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488333" comment="freeradius-server-libs-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488334" comment="freeradius-server-mysql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488335" comment="freeradius-server-perl-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488336" comment="freeradius-server-postgresql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488337" comment="freeradius-server-python-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488338" comment="freeradius-server-sqlite-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488339" comment="freeradius-server-utils-3.0.16-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10979</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10979" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10979" ref_url="https://www.suse.com/security/cve/CVE-2017-10979" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003154.html" source="SUSE-SU"/>
    <description>
    An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10979/">CVE-2017-10979</cve>
	<bugzilla href="https://bugzilla.suse.com/1049086">SUSE bug 1049086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10980</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10980" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10980" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10980" ref_url="https://www.suse.com/security/cve/CVE-2017-10980" source="SUSE CVE"/>
    <description>
    An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()" and a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10980/">CVE-2017-10980</cve>
	<bugzilla href="https://bugzilla.suse.com/1049086">SUSE bug 1049086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10981</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10981" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10981" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10981" ref_url="https://www.suse.com/security/cve/CVE-2017-10981" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003154.html" source="SUSE-SU"/>
    <description>
    An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in fr_dhcp_decode()" and a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10981/">CVE-2017-10981</cve>
	<bugzilla href="https://bugzilla.suse.com/1049086">SUSE bug 1049086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10982</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10982" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10982" ref_url="https://www.suse.com/security/cve/CVE-2017-10982" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003154.html" source="SUSE-SU"/>
    <description>
    An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in fr_dhcp_decode_options()" and a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10982/">CVE-2017-10982</cve>
	<bugzilla href="https://bugzilla.suse.com/1049086">SUSE bug 1049086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10983</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10983" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10983" ref_url="https://www.suse.com/security/cve/CVE-2017-10983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003154.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2845-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00087.html" source="SUSE-SU"/>
    <description>
    An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10983/">CVE-2017-10983</cve>
	<bugzilla href="https://bugzilla.suse.com/1049086">SUSE bug 1049086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488329" comment="freeradius-server-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488330" comment="freeradius-server-devel-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488331" comment="freeradius-server-krb5-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488332" comment="freeradius-server-ldap-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488333" comment="freeradius-server-libs-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488334" comment="freeradius-server-mysql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488335" comment="freeradius-server-perl-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488336" comment="freeradius-server-postgresql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488337" comment="freeradius-server-python-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488338" comment="freeradius-server-sqlite-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488339" comment="freeradius-server-utils-3.0.16-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10984</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10984" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10984" ref_url="https://www.suse.com/security/cve/CVE-2017-10984" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003153.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2845-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00087.html" source="SUSE-SU"/>
    <description>
    An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10984/">CVE-2017-10984</cve>
	<bugzilla href="https://bugzilla.suse.com/1049086">SUSE bug 1049086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488329" comment="freeradius-server-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488330" comment="freeradius-server-devel-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488331" comment="freeradius-server-krb5-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488332" comment="freeradius-server-ldap-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488333" comment="freeradius-server-libs-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488334" comment="freeradius-server-mysql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488335" comment="freeradius-server-perl-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488336" comment="freeradius-server-postgresql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488337" comment="freeradius-server-python-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488338" comment="freeradius-server-sqlite-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488339" comment="freeradius-server-utils-3.0.16-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10985</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10985" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10985" ref_url="https://www.suse.com/security/cve/CVE-2017-10985" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003153.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2845-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00087.html" source="SUSE-SU"/>
    <description>
    An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10985/">CVE-2017-10985</cve>
	<bugzilla href="https://bugzilla.suse.com/1049086">SUSE bug 1049086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488329" comment="freeradius-server-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488330" comment="freeradius-server-devel-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488331" comment="freeradius-server-krb5-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488332" comment="freeradius-server-ldap-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488333" comment="freeradius-server-libs-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488334" comment="freeradius-server-mysql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488335" comment="freeradius-server-perl-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488336" comment="freeradius-server-postgresql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488337" comment="freeradius-server-python-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488338" comment="freeradius-server-sqlite-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488339" comment="freeradius-server-utils-3.0.16-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10986</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10986" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10986" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10986" ref_url="https://www.suse.com/security/cve/CVE-2017-10986" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2845-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00087.html" source="SUSE-SU"/>
    <description>
    An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10986/">CVE-2017-10986</cve>
	<bugzilla href="https://bugzilla.suse.com/1049086">SUSE bug 1049086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488329" comment="freeradius-server-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488330" comment="freeradius-server-devel-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488331" comment="freeradius-server-krb5-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488332" comment="freeradius-server-ldap-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488333" comment="freeradius-server-libs-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488334" comment="freeradius-server-mysql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488335" comment="freeradius-server-perl-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488336" comment="freeradius-server-postgresql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488337" comment="freeradius-server-python-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488338" comment="freeradius-server-sqlite-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488339" comment="freeradius-server-utils-3.0.16-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10987</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10987" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10987" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10987" ref_url="https://www.suse.com/security/cve/CVE-2017-10987" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003153.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2845-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00087.html" source="SUSE-SU"/>
    <description>
    An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10987/">CVE-2017-10987</cve>
	<bugzilla href="https://bugzilla.suse.com/1049086">SUSE bug 1049086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488329" comment="freeradius-server-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488330" comment="freeradius-server-devel-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488331" comment="freeradius-server-krb5-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488332" comment="freeradius-server-ldap-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488333" comment="freeradius-server-libs-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488334" comment="freeradius-server-mysql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488335" comment="freeradius-server-perl-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488336" comment="freeradius-server-postgresql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488337" comment="freeradius-server-python-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488338" comment="freeradius-server-sqlite-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488339" comment="freeradius-server-utils-3.0.16-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10988</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-10988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10988" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-10988" ref_url="https://www.suse.com/security/cve/CVE-2017-10988" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003153.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00067.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2017-10988/">CVE-2017-10988</cve>
	<bugzilla href="https://bugzilla.suse.com/1049086">SUSE bug 1049086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488329" comment="freeradius-server-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488330" comment="freeradius-server-devel-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488331" comment="freeradius-server-krb5-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488332" comment="freeradius-server-ldap-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488333" comment="freeradius-server-libs-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488334" comment="freeradius-server-mysql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488335" comment="freeradius-server-perl-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488336" comment="freeradius-server-postgresql-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488337" comment="freeradius-server-python-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488338" comment="freeradius-server-sqlite-3.0.16-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488339" comment="freeradius-server-utils-3.0.16-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11103</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11103" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11103" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11103" ref_url="https://www.suse.com/security/cve/CVE-2017-11103" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="TID7021155" ref_url="https://www.suse.com/support/kb/doc/?id=7021155" source="SUSE-SU"/>
		<reference ref_id="TID7022454" ref_url="https://www.suse.com/support/kb/doc/?id=7022454" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00077.html" source="SUSE-SU"/>
    <description>
    Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11103/">CVE-2017-11103</cve>
	<bugzilla href="https://bugzilla.suse.com/1048278">SUSE bug 1048278</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11108</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11108" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11108" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11108" ref_url="https://www.suse.com/security/cve/CVE-2017-11108" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11108/">CVE-2017-11108</cve>
	<bugzilla href="https://bugzilla.suse.com/1047873">SUSE bug 1047873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123142">SUSE bug 1123142</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11111</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11111" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11111" ref_url="https://www.suse.com/security/cve/CVE-2017-11111" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2125-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00030.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11111/">CVE-2017-11111</cve>
	<bugzilla href="https://bugzilla.suse.com/1047925">SUSE bug 1047925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073798">SUSE bug 1073798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11126</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11126" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11126" ref_url="https://www.suse.com/security/cve/CVE-2017-11126" source="SUSE CVE"/>
    <description>
    The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "block_type != 2" case, a similar issue to CVE-2017-9870.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11126/">CVE-2017-11126</cve>
	<bugzilla href="https://bugzilla.suse.com/1046766">SUSE bug 1046766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082393">SUSE bug 1082393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482308" comment="libmpg123-0-1.25.10-1.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486469" comment="libout123-0-1.25.10-1.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486470" comment="mpg123-1.25.10-1.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486471" comment="mpg123-devel-1.25.10-1.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486472" comment="mpg123-pulse-1.25.10-1.38 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11176</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11176" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11176" ref_url="https://www.suse.com/security/cve/CVE-2017-11176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2342-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-11176/">CVE-2017-11176</cve>
	<bugzilla href="https://bugzilla.suse.com/1048275">SUSE bug 1048275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11185</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11185" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11185" ref_url="https://www.suse.com/security/cve/CVE-2017-11185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003167.html" source="SUSE-SU"/>
    <description>
    The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11185/">CVE-2017-11185</cve>
	<bugzilla href="https://bugzilla.suse.com/1051222">SUSE bug 1051222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107874">SUSE bug 1107874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11311</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11311" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11311" ref_url="https://www.suse.com/security/cve/CVE-2017-11311" source="SUSE CVE"/>
    <description>
    soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11311/">CVE-2017-11311</cve>
	<bugzilla href="https://bugzilla.suse.com/1048666">SUSE bug 1048666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694248" comment="libopenmpt is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486876" comment="libmodplug-devel-0.3.9-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486877" comment="libmodplug1-0.3.9-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486878" comment="libopenmpt-devel-0.3.9-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486879" comment="libopenmpt0-0.3.9-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486880" comment="libopenmpt_modplug1-0.3.9-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009694249" comment="libmodplug-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694250" comment="libmodplug1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694251" comment="libopenmpt-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694252" comment="libopenmpt0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694253" comment="libopenmpt_modplug1 is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711334" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11334</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11334" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11334" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11334" ref_url="https://www.suse.com/security/cve/CVE-2017-11334" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11334/">CVE-2017-11334</cve>
	<bugzilla href="https://bugzilla.suse.com/1048902">SUSE bug 1048902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048920">SUSE bug 1048920</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11336</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11336" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11336" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11336" ref_url="https://www.suse.com/security/cve/CVE-2017-11336" source="SUSE CVE"/>
    <description>
    There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11336/">CVE-2017-11336</cve>
	<bugzilla href="https://bugzilla.suse.com/1048883">SUSE bug 1048883</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684950" comment="libexiv2-26 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335900" comment="libexiv2-devel is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11337</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11337" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11337" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11337" ref_url="https://www.suse.com/security/cve/CVE-2017-11337" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11337/">CVE-2017-11337</cve>
	<bugzilla href="https://bugzilla.suse.com/1048883">SUSE bug 1048883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684950" comment="libexiv2-26 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335900" comment="libexiv2-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11338</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11338" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11338" ref_url="https://www.suse.com/security/cve/CVE-2017-11338" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11338/">CVE-2017-11338</cve>
	<bugzilla href="https://bugzilla.suse.com/1048883">SUSE bug 1048883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684950" comment="libexiv2-26 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335900" comment="libexiv2-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11339</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11339" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11339" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11339" ref_url="https://www.suse.com/security/cve/CVE-2017-11339" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11339/">CVE-2017-11339</cve>
	<bugzilla href="https://bugzilla.suse.com/1048883">SUSE bug 1048883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684950" comment="libexiv2-26 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335900" comment="libexiv2-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11340</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11340" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11340" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11340" ref_url="https://www.suse.com/security/cve/CVE-2017-11340" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11340/">CVE-2017-11340</cve>
	<bugzilla href="https://bugzilla.suse.com/1048883">SUSE bug 1048883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684950" comment="libexiv2-26 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335900" comment="libexiv2-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11362</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11362" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11362" ref_url="https://www.suse.com/security/cve/CVE-2017-11362" source="SUSE CVE"/>
    <description>
    In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact within International Components for Unicode (ICU) for C/C++ via a long first argument to the msgfmt_parse_message function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11362/">CVE-2017-11362</cve>
	<bugzilla href="https://bugzilla.suse.com/1040094">SUSE bug 1040094</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651226" comment="php7-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651231" comment="php7-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651244" comment="php7-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11368</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11368" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11368" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11368" ref_url="https://www.suse.com/security/cve/CVE-2017-11368" source="SUSE CVE"/>
    <description>
    In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11368/">CVE-2017-11368</cve>
	<bugzilla href="https://bugzilla.suse.com/1049819">SUSE bug 1049819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11399</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11399" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11399" ref_url="https://www.suse.com/security/cve/CVE-2017-11399" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11399/">CVE-2017-11399</cve>
	<bugzilla href="https://bugzilla.suse.com/1049095">SUSE bug 1049095</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11406</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11406" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11406" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11406" ref_url="https://www.suse.com/security/cve/CVE-2017-11406" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00090.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11406/">CVE-2017-11406</cve>
	<bugzilla href="https://bugzilla.suse.com/1049255">SUSE bug 1049255</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11407</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11407" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11407" ref_url="https://www.suse.com/security/cve/CVE-2017-11407" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00090.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11407/">CVE-2017-11407</cve>
	<bugzilla href="https://bugzilla.suse.com/1049255">SUSE bug 1049255</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11408</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11408" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11408" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11408" ref_url="https://www.suse.com/security/cve/CVE-2017-11408" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00090.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11408/">CVE-2017-11408</cve>
	<bugzilla href="https://bugzilla.suse.com/1049255">SUSE bug 1049255</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11410</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11410" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11410" ref_url="https://www.suse.com/security/cve/CVE-2017-11410" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00090.html" source="SUSE-SU"/>
    <description>
    In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-7702.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11410/">CVE-2017-11410</cve>
	<bugzilla href="https://bugzilla.suse.com/1033938">SUSE bug 1033938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049255">SUSE bug 1049255</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11411</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11411" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11411" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11411" ref_url="https://www.suse.com/security/cve/CVE-2017-11411" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2032-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1958-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00090.html" source="SUSE-SU"/>
    <description>
    In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9350.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11411/">CVE-2017-11411</cve>
	<bugzilla href="https://bugzilla.suse.com/1049255">SUSE bug 1049255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049621">SUSE bug 1049621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11423</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11423" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11423" ref_url="https://www.suse.com/security/cve/CVE-2017-11423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0809-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0863-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00062.html" source="SUSE-SU"/>
    <description>
    The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11423/">CVE-2017-11423</cve>
	<bugzilla href="https://bugzilla.suse.com/1049423">SUSE bug 1049423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083915">SUSE bug 1083915</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481437" comment="libmspack-devel-0.6-3.3.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481438" comment="libmspack0-0.6-3.3.11 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11427</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11427" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11427" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11427" ref_url="https://www.suse.com/security/cve/CVE-2017-11427" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008165.html" source="SUSE-SU"/>
    <description>
    OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11427/">CVE-2017-11427</cve>
	<bugzilla href="https://bugzilla.suse.com/1180767">SUSE bug 1180767</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009601061" comment="python3-defusedxml-0.6.0-1.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009601062" comment="python3-freezegun-0.3.12-1.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009601063" comment="python3-isodate-0.6.0-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009601064" comment="python3-pkgconfig-1.5.1-1.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009601065" comment="python3-python3-saml-1.9.0-1.5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009601066" comment="python3-xmlsec-1.3.6-1.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11434</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11434" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11434" ref_url="https://www.suse.com/security/cve/CVE-2017-11434" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11434/">CVE-2017-11434</cve>
	<bugzilla href="https://bugzilla.suse.com/1049381">SUSE bug 1049381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049578">SUSE bug 1049578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11462</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11462" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11462" ref_url="https://www.suse.com/security/cve/CVE-2017-11462" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2659-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003277.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003359.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003861.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2712-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-11462/">CVE-2017-11462</cve>
	<bugzilla href="https://bugzilla.suse.com/1056995">SUSE bug 1056995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122468">SUSE bug 1122468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11464</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11464" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11464" ref_url="https://www.suse.com/security/cve/CVE-2017-11464" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2149-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00042.html" source="SUSE-SU"/>
    <description>
    A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11464/">CVE-2017-11464</cve>
	<bugzilla href="https://bugzilla.suse.com/1049607">SUSE bug 1049607</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480257" comment="gdk-pixbuf-loader-rsvg-2.42.3-1.49 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480258" comment="librsvg-2-2-2.42.3-1.49 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486497" comment="librsvg-devel-2.42.3-1.49 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486498" comment="typelib-1_0-Rsvg-2_0-2.42.3-1.49 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11472</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11472" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11472" ref_url="https://www.suse.com/security/cve/CVE-2017-11472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2495-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00057.html" source="SUSE-SU"/>
    <description>
    The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-11472/">CVE-2017-11472</cve>
	<bugzilla href="https://bugzilla.suse.com/1049580">SUSE bug 1049580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11473</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11473" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11473" ref_url="https://www.suse.com/security/cve/CVE-2017-11473" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2286-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2342-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2389-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2110-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00032.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11473/">CVE-2017-11473</cve>
	<bugzilla href="https://bugzilla.suse.com/1049603">SUSE bug 1049603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061680">SUSE bug 1061680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11541</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11541" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11541" ref_url="https://www.suse.com/security/cve/CVE-2017-11541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11541/">CVE-2017-11541</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123142">SUSE bug 1123142</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11542</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11542" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11542" ref_url="https://www.suse.com/security/cve/CVE-2017-11542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11542/">CVE-2017-11542</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123142">SUSE bug 1123142</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11543</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11543" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11543" ref_url="https://www.suse.com/security/cve/CVE-2017-11543" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-11543/">CVE-2017-11543</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123142">SUSE bug 1123142</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11548</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11548" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11548" ref_url="https://www.suse.com/security/cve/CVE-2017-11548" source="SUSE CVE"/>
    <description>
    The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11548/">CVE-2017-11548</cve>
	<bugzilla href="https://bugzilla.suse.com/1081767">SUSE bug 1081767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081784">SUSE bug 1081784</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339318" comment="libao is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009769774" comment="libao-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009769775" comment="libao-plugins4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009769776" comment="libao4 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11553</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11553" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11553" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11553" ref_url="https://www.suse.com/security/cve/CVE-2017-11553" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0.26. A crafted input will lead to remote denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11553/">CVE-2017-11553</cve>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103870">SUSE bug 1103870</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684950" comment="libexiv2-26 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335900" comment="libexiv2-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11591</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11591" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11591" ref_url="https://www.suse.com/security/cve/CVE-2017-11591" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11591/">CVE-2017-11591</cve>
	<bugzilla href="https://bugzilla.suse.com/1050257">SUSE bug 1050257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725374" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009725375" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725386" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009725387" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725392" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009725393" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725400" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009725401" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11592</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11592" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11592" ref_url="https://www.suse.com/security/cve/CVE-2017-11592" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a remote denial of service attack (heap memory corruption) via crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11592/">CVE-2017-11592</cve>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103872">SUSE bug 1103872</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684950" comment="libexiv2-26 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335900" comment="libexiv2-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11600</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11600" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11600" ref_url="https://www.suse.com/security/cve/CVE-2017-11600" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004430.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004434.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004435.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2367-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004446.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004468.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-11600/">CVE-2017-11600</cve>
	<bugzilla href="https://bugzilla.suse.com/1050231">SUSE bug 1050231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096564">SUSE bug 1096564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11613</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11613" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11613" ref_url="https://www.suse.com/security/cve/CVE-2017-11613" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004759.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004784.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3371-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00056.html" source="SUSE-SU"/>
    <description>
    In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11613/">CVE-2017-11613</cve>
	<bugzilla href="https://bugzilla.suse.com/1082332">SUSE bug 1082332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106853">SUSE bug 1106853</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782688" comment="libtiff5-32bit-4.0.9-5.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782686" comment="libtiff-devel-4.0.9-5.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782687" comment="libtiff5-4.0.9-5.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11624</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11624" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11624" ref_url="https://www.suse.com/security/cve/CVE-2017-11624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after two consecutive calls to QPDFObjectHandle::parseInternal, aka an "infinite loop."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11624/">CVE-2017-11624</cve>
	<bugzilla href="https://bugzilla.suse.com/1050581">SUSE bug 1050581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480704" comment="libqpdf21-8.0.2-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480705" comment="qpdf-8.0.2-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480706" comment="qpdf-devel-8.0.2-1.5 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11625</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11625" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11625" ref_url="https://www.suse.com/security/cve/CVE-2017-11625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDF::resolveObjectsInStream function in QPDF.cc, aka an "infinite loop."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11625/">CVE-2017-11625</cve>
	<bugzilla href="https://bugzilla.suse.com/1050579">SUSE bug 1050579</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480704" comment="libqpdf21-8.0.2-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480705" comment="qpdf-8.0.2-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480706" comment="qpdf-devel-8.0.2-1.5 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11626</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11626" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11626" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11626" ref_url="https://www.suse.com/security/cve/CVE-2017-11626" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after four consecutive calls to QPDFObjectHandle::parseInternal, aka an "infinite loop."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11626/">CVE-2017-11626</cve>
	<bugzilla href="https://bugzilla.suse.com/1050578">SUSE bug 1050578</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480704" comment="libqpdf21-8.0.2-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480705" comment="qpdf-8.0.2-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480706" comment="qpdf-devel-8.0.2-1.5 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11627</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11627" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11627" ref_url="https://www.suse.com/security/cve/CVE-2017-11627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the PointerHolder function in PointerHolder.hh, aka an "infinite loop."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11627/">CVE-2017-11627</cve>
	<bugzilla href="https://bugzilla.suse.com/1050577">SUSE bug 1050577</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480704" comment="libqpdf21-8.0.2-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480705" comment="qpdf-8.0.2-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480706" comment="qpdf-devel-8.0.2-1.5 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11665</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11665" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11665" ref_url="https://www.suse.com/security/cve/CVE-2017-11665" source="SUSE CVE"/>
    <description>
    The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segmentation Violation and application crash) via a crafted stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11665/">CVE-2017-11665</cve>
	<bugzilla href="https://bugzilla.suse.com/1082335">SUSE bug 1082335</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11683</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11683" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11683" ref_url="https://www.suse.com/security/cve/CVE-2017-11683" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11683/">CVE-2017-11683</cve>
	<bugzilla href="https://bugzilla.suse.com/1051188">SUSE bug 1051188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684950" comment="libexiv2-26 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335900" comment="libexiv2-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11695</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11695" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11695" ref_url="https://www.suse.com/security/cve/CVE-2017-11695" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11695/">CVE-2017-11695</cve>
	<bugzilla href="https://bugzilla.suse.com/1053418">SUSE bug 1053418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053419">SUSE bug 1053419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053420">SUSE bug 1053420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053422">SUSE bug 1053422</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338955" comment="libfreebl3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338956" comment="libfreebl3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338957" comment="libfreebl3-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338958" comment="libfreebl3-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338959" comment="libsoftokn3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338960" comment="libsoftokn3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338961" comment="libsoftokn3-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338962" comment="libsoftokn3-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338881" comment="mozilla-nss is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338963" comment="mozilla-nss-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338964" comment="mozilla-nss-certs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338965" comment="mozilla-nss-certs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338969" comment="mozilla-nss-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338966" comment="mozilla-nss-sysinit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338968" comment="mozilla-nss-tools is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11696</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11696" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11696" ref_url="https://www.suse.com/security/cve/CVE-2017-11696" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11696/">CVE-2017-11696</cve>
	<bugzilla href="https://bugzilla.suse.com/1053418">SUSE bug 1053418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053419">SUSE bug 1053419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053420">SUSE bug 1053420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053422">SUSE bug 1053422</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338955" comment="libfreebl3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338956" comment="libfreebl3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338957" comment="libfreebl3-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338958" comment="libfreebl3-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338959" comment="libsoftokn3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338960" comment="libsoftokn3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338961" comment="libsoftokn3-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338962" comment="libsoftokn3-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338881" comment="mozilla-nss is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338963" comment="mozilla-nss-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338964" comment="mozilla-nss-certs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338965" comment="mozilla-nss-certs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338969" comment="mozilla-nss-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338966" comment="mozilla-nss-sysinit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338968" comment="mozilla-nss-tools is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11698</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-11698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11698" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-11698" ref_url="https://www.suse.com/security/cve/CVE-2017-11698" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in the __get_page function in lib/dbm/src/h_page.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-11698/">CVE-2017-11698</cve>
	<bugzilla href="https://bugzilla.suse.com/1053418">SUSE bug 1053418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053419">SUSE bug 1053419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053420">SUSE bug 1053420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053422">SUSE bug 1053422</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338955" comment="libfreebl3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338956" comment="libfreebl3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338957" comment="libfreebl3-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338958" comment="libfreebl3-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338959" comment="libsoftokn3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338960" comment="libsoftokn3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338961" comment="libsoftokn3-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338962" comment="libsoftokn3-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338881" comment="mozilla-nss is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338963" comment="mozilla-nss-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338964" comment="mozilla-nss-certs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338965" comment="mozilla-nss-certs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338969" comment="mozilla-nss-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338966" comment="mozilla-nss-sysinit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338968" comment="mozilla-nss-tools is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12067</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12067" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12067" ref_url="https://www.suse.com/security/cve/CVE-2017-12067" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2184-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00077.html" source="SUSE-SU"/>
    <description>
    Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12067/">CVE-2017-12067</cve>
	<bugzilla href="https://bugzilla.suse.com/1051634">SUSE bug 1051634</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486490" comment="libpotrace0-1.15-3.19 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12132</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12132" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12132" ref_url="https://www.suse.com/security/cve/CVE-2017-12132" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0451-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0565-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00039.html" source="SUSE-SU"/>
    <description>
    The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-12132/">CVE-2017-12132</cve>
	<bugzilla href="https://bugzilla.suse.com/1051791">SUSE bug 1051791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12133</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12133" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12133" ref_url="https://www.suse.com/security/cve/CVE-2017-12133" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0874-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003870.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0668-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00037.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) before 2.26 allows remote attackers to have unspecified impact via vectors related to error path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12133/">CVE-2017-12133</cve>
	<bugzilla href="https://bugzilla.suse.com/1081556">SUSE bug 1081556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/980854">SUSE bug 980854</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12135</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12135" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12135" ref_url="https://www.suse.com/security/cve/CVE-2017-12135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00022.html" source="SUSE-SU"/>
    <description>
    Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-12135/">CVE-2017-12135</cve>
	<bugzilla href="https://bugzilla.suse.com/1051787">SUSE bug 1051787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169392">SUSE bug 1169392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12136</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12136" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12136" ref_url="https://www.suse.com/security/cve/CVE-2017-12136" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00022.html" source="SUSE-SU"/>
    <description>
    Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12136/">CVE-2017-12136</cve>
	<bugzilla href="https://bugzilla.suse.com/1051789">SUSE bug 1051789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12137</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12137" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12137" ref_url="https://www.suse.com/security/cve/CVE-2017-12137" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2327-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2339-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2394-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00022.html" source="SUSE-SU"/>
    <description>
    arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12137/">CVE-2017-12137</cve>
	<bugzilla href="https://bugzilla.suse.com/1051788">SUSE bug 1051788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12150</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12150" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12150" ref_url="https://www.suse.com/security/cve/CVE-2017-12150" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003292.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2726-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003390.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003453.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2706-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2713-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00095.html" source="SUSE-SU"/>
    <description>
    It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-12150/">CVE-2017-12150</cve>
	<bugzilla href="https://bugzilla.suse.com/1058622">SUSE bug 1058622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712151" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12151</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12151" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12151" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12151" ref_url="https://www.suse.com/security/cve/CVE-2017-12151" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2726-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003390.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003453.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2706-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2713-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00095.html" source="SUSE-SU"/>
    <description>
    A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-12151/">CVE-2017-12151</cve>
	<bugzilla href="https://bugzilla.suse.com/1058565">SUSE bug 1058565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12153</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12153" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12153" ref_url="https://www.suse.com/security/cve/CVE-2017-12153" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2739-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2741-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00019.html" source="SUSE-SU"/>
    <description>
    A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12153/">CVE-2017-12153</cve>
	<bugzilla href="https://bugzilla.suse.com/1058410">SUSE bug 1058410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058624">SUSE bug 1058624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12154</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12154" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12154" ref_url="https://www.suse.com/security/cve/CVE-2017-12154" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2739-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2741-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00019.html" source="SUSE-SU"/>
    <description>
    The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0 vmcs02 controls exist in cases where L1 omits the "use TPR shadow" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write access to the hardware CR8 register.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12154/">CVE-2017-12154</cve>
	<bugzilla href="https://bugzilla.suse.com/1058038">SUSE bug 1058038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058507">SUSE bug 1058507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12163</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12163" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12163" ref_url="https://www.suse.com/security/cve/CVE-2017-12163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003291.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003292.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2726-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003390.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003453.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2706-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2713-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00095.html" source="SUSE-SU"/>
    <description>
    An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12163/">CVE-2017-12163</cve>
	<bugzilla href="https://bugzilla.suse.com/1058410">SUSE bug 1058410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058624">SUSE bug 1058624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12164</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12164" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12164" ref_url="https://www.suse.com/security/cve/CVE-2017-12164" source="SUSE CVE"/>
    <description>
    A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12164/">CVE-2017-12164</cve>
	<bugzilla href="https://bugzilla.suse.com/1058136">SUSE bug 1058136</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180206">SUSE bug 1180206</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486606" comment="gdm-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486607" comment="gdm-devel-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486608" comment="gdm-lang-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486609" comment="gdmflexiserver-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486610" comment="libgdm1-3.26.2.1-13.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486611" comment="typelib-1_0-Gdm-1_0-3.26.2.1-13.19.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12166</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12166" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12166" ref_url="https://www.suse.com/security/cve/CVE-2017-12166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2838-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2839-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2892-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00082.html" source="SUSE-SU"/>
    <description>
    OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-27"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="10/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12166/">CVE-2017-12166</cve>
	<bugzilla href="https://bugzilla.suse.com/1060877">SUSE bug 1060877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334565" comment="openvpn is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481609" comment="openvpn-2.4.3-5.3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481610" comment="openvpn-auth-pam-plugin-2.4.3-5.3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481611" comment="openvpn-devel-2.4.3-5.3.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12173</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12173" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12173" ref_url="https://www.suse.com/security/cve/CVE-2017-12173" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003377.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2942-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00016.html" source="SUSE-SU"/>
    <description>
    It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login environment, if a password hash was locally cached for a given user, an authenticated attacker could use this flaw to retrieve it.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12173/">CVE-2017-12173</cve>
	<bugzilla href="https://bugzilla.suse.com/1061832">SUSE bug 1061832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481381" comment="libipa_hbac-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481382" comment="libipa_hbac0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481383" comment="libsss_certmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481384" comment="libsss_certmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481385" comment="libsss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481386" comment="libsss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481387" comment="libsss_nss_idmap-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481388" comment="libsss_nss_idmap0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481389" comment="libsss_simpleifp-devel-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481390" comment="libsss_simpleifp0-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481391" comment="python3-sssd-config-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481392" comment="sssd-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481393" comment="sssd-32bit-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481394" comment="sssd-ad-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481395" comment="sssd-dbus-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481396" comment="sssd-ipa-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481397" comment="sssd-krb5-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481398" comment="sssd-krb5-common-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481399" comment="sssd-ldap-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481400" comment="sssd-proxy-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481401" comment="sssd-tools-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481402" comment="sssd-wbclient-1.16.1-3.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481403" comment="sssd-wbclient-devel-1.16.1-3.18.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12176</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12176" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12176" ref_url="https://www.suse.com/security/cve/CVE-2017-12176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2823-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00074.html" source="SUSE-SU"/>
    <description>
    xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12176/">CVE-2017-12176</cve>
	<bugzilla href="https://bugzilla.suse.com/1063041">SUSE bug 1063041</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487792" comment="xorg-x11-server-sdk-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489170" comment="xorg-x11-server-wayland-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481676" comment="xorg-x11-server-1.20.3-12.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481677" comment="xorg-x11-server-extra-1.20.3-12.29 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12187</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12187" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12187" ref_url="https://www.suse.com/security/cve/CVE-2017-12187" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003402.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2823-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00074.html" source="SUSE-SU"/>
    <description>
    xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12187/">CVE-2017-12187</cve>
	<bugzilla href="https://bugzilla.suse.com/1063034">SUSE bug 1063034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487792" comment="xorg-x11-server-sdk-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489170" comment="xorg-x11-server-wayland-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481676" comment="xorg-x11-server-1.20.3-12.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481677" comment="xorg-x11-server-extra-1.20.3-12.29 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12190</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12190" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12190" ref_url="https://www.suse.com/security/cve/CVE-2017-12190" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004055.html" source="SUSE-SU"/>
    <description>
    The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12190/">CVE-2017-12190</cve>
	<bugzilla href="https://bugzilla.suse.com/1062568">SUSE bug 1062568</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12193</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12193" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12193" ref_url="https://www.suse.com/security/cve/CVE-2017-12193" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12193/">CVE-2017-12193</cve>
	<bugzilla href="https://bugzilla.suse.com/1066192">SUSE bug 1066192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12374</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12374" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12374" ref_url="https://www.suse.com/security/cve/CVE-2017-12374" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
    <description>
    The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail parsing operations (mbox.c operations on bounce messages). If successfully exploited, the ClamAV software could allow a variable pointing to the mail body which could cause a used after being free (use-after-free) instance which may lead to a disruption of services on an affected device to include a denial of service condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12374/">CVE-2017-12374</cve>
	<bugzilla href="https://bugzilla.suse.com/1077732">SUSE bug 1077732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12375</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12375" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12375" ref_url="https://www.suse.com/security/cve/CVE-2017-12375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
    <description>
    The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail parsing functions (the rfc2047 function in mbox.c). An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. This action could cause a buffer overflow condition when ClamAV scans the malicious email, allowing the attacker to potentially cause a DoS condition on an affected device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12375/">CVE-2017-12375</cve>
	<bugzilla href="https://bugzilla.suse.com/1077732">SUSE bug 1077732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12376</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12376" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12376" ref_url="https://www.suse.com/security/cve/CVE-2017-12376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
    <description>
    ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause a handle_pdfname (in pdf.c) buffer overflow when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition or potentially execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12376/">CVE-2017-12376</cve>
	<bugzilla href="https://bugzilla.suse.com/1077732">SUSE bug 1077732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12377</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12377" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12377" ref_url="https://www.suse.com/security/cve/CVE-2017-12377" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
    <description>
    ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms in mew packet files sent to an affected device. A successful exploit could cause a heap-based buffer over-read condition in mew.c when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition or potentially execute arbitrary code on the affected device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12377/">CVE-2017-12377</cve>
	<bugzilla href="https://bugzilla.suse.com/1077732">SUSE bug 1077732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12378</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12378" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12378" ref_url="https://www.suse.com/security/cve/CVE-2017-12378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
    <description>
    ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms of .tar (Tape Archive) files sent to an affected device. A successful exploit could cause a checksum buffer over-read condition when ClamAV scans the malicious .tar file, potentially allowing the attacker to cause a DoS condition on the affected device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12378/">CVE-2017-12378</cve>
	<bugzilla href="https://bugzilla.suse.com/1077732">SUSE bug 1077732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12379</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12379" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12379" ref_url="https://www.suse.com/security/cve/CVE-2017-12379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
    <description>
    ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms in the message parsing function on an affected system. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. This action could cause a messageAddArgument (in message.c) buffer overflow condition when ClamAV scans the malicious email, allowing the attacker to potentially cause a DoS condition or execute arbitrary code on an affected device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12379/">CVE-2017-12379</cve>
	<bugzilla href="https://bugzilla.suse.com/1077732">SUSE bug 1077732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12380</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12380" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12380" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12380" ref_url="https://www.suse.com/security/cve/CVE-2017-12380" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
    <description>
    ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mail parsing functions of the ClamAV software. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. An exploit could trigger a NULL pointer dereference condition when ClamAV scans the malicious email, which may result in a DoS condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12380/">CVE-2017-12380</cve>
	<bugzilla href="https://bugzilla.suse.com/1077732">SUSE bug 1077732</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12428</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12428" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12428" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12428" ref_url="https://www.suse.com/security/cve/CVE-2017-12428" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003381.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2999-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00042.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service in CloneDrawInfo in draw.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12428/">CVE-2017-12428</cve>
	<bugzilla href="https://bugzilla.suse.com/1052249">SUSE bug 1052249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052253">SUSE bug 1052253</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12431</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12431" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12431" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12431" ref_url="https://www.suse.com/security/cve/CVE-2017-12431" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003381.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2999-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00042.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.6-1, a use-after-free vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-12431/">CVE-2017-12431</cve>
	<bugzilla href="https://bugzilla.suse.com/1052249">SUSE bug 1052249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052253">SUSE bug 1052253</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12447</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12447" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12447" ref_url="https://www.suse.com/security/cve/CVE-2017-12447" source="SUSE CVE"/>
    <description>
    GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12447/">CVE-2017-12447</cve>
	<bugzilla href="https://bugzilla.suse.com/1128908">SUSE bug 1128908</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335272" comment="gdk-pixbuf-query-loaders-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335273" comment="libgdk_pixbuf-2_0-0-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335274" comment="gdk-pixbuf-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335266" comment="gdk-pixbuf-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335267" comment="gdk-pixbuf-query-loaders is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340525" comment="gdk-pixbuf-thumbnailer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335268" comment="libgdk_pixbuf-2_0-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335269" comment="typelib-1_0-GdkPixbuf-2_0 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12448</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12448" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12448" ref_url="https://www.suse.com/security/cve/CVE-2017-12448" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect functions are called during an attempt to release memory. The issue can be addressed by better input validation in the bfd_generic_archive_p function in bfd/archive.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12448/">CVE-2017-12448</cve>
	<bugzilla href="https://bugzilla.suse.com/1052518">SUSE bug 1052518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335833" comment="binutils-gold is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334069" comment="binutils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335832" comment="binutils-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337413" comment="binutils-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342534" comment="libctf-nobfd0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342535" comment="libctf0 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12450</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12450" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12450" ref_url="https://www.suse.com/security/cve/CVE-2017-12450" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12450/">CVE-2017-12450</cve>
	<bugzilla href="https://bugzilla.suse.com/1052514">SUSE bug 1052514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335833" comment="binutils-gold is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334069" comment="binutils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335832" comment="binutils-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337413" comment="binutils-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342534" comment="libctf-nobfd0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342535" comment="libctf0 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12452</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12452" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12452" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12452" ref_url="https://www.suse.com/security/cve/CVE-2017-12452" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted mach-o file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12452/">CVE-2017-12452</cve>
	<bugzilla href="https://bugzilla.suse.com/1052511">SUSE bug 1052511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12453</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12453" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12453" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12453" ref_url="https://www.suse.com/security/cve/CVE-2017-12453" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12453/">CVE-2017-12453</cve>
	<bugzilla href="https://bugzilla.suse.com/1052509">SUSE bug 1052509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12454</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12454" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12454" ref_url="https://www.suse.com/security/cve/CVE-2017-12454" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12454/">CVE-2017-12454</cve>
	<bugzilla href="https://bugzilla.suse.com/1052507">SUSE bug 1052507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12456</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12456" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12456" ref_url="https://www.suse.com/security/cve/CVE-2017-12456" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12456/">CVE-2017-12456</cve>
	<bugzilla href="https://bugzilla.suse.com/1052503">SUSE bug 1052503</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12459</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12459" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12459" ref_url="https://www.suse.com/security/cve/CVE-2017-12459" source="SUSE CVE"/>
    <description>
    The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12459/">CVE-2017-12459</cve>
	<bugzilla href="https://bugzilla.suse.com/1052496">SUSE bug 1052496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059785">SUSE bug 1059785</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335833" comment="binutils-gold is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334069" comment="binutils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335832" comment="binutils-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337413" comment="binutils-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342534" comment="libctf-nobfd0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342535" comment="libctf0 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12562</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12562" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12562" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12562" ref_url="https://www.suse.com/security/cve/CVE-2017-12562" source="SUSE CVE"/>
    <description>
    Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12562/">CVE-2017-12562</cve>
	<bugzilla href="https://bugzilla.suse.com/1052476">SUSE bug 1052476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481480" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12564</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12564" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12564" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12564" ref_url="https://www.suse.com/security/cve/CVE-2017-12564" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0130-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003612.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0087-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0155-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00058.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12564/">CVE-2017-12564</cve>
	<bugzilla href="https://bugzilla.suse.com/1052468">SUSE bug 1052468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12595</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12595" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12595" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12595" ref_url="https://www.suse.com/security/cve/CVE-2017-12595" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3066-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3066-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004714.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0469-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html" source="SUSE-SU"/>
    <description>
    The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12595/">CVE-2017-12595</cve>
	<bugzilla href="https://bugzilla.suse.com/1055960">SUSE bug 1055960</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480704" comment="libqpdf21-8.0.2-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480705" comment="qpdf-8.0.2-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480706" comment="qpdf-devel-8.0.2-1.5 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12596</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12596" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12596" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12596" ref_url="https://www.suse.com/security/cve/CVE-2017-12596" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0585-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003772.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0587-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003774.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00013.html" source="SUSE-SU"/>
    <description>
    In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12596/">CVE-2017-12596</cve>
	<bugzilla href="https://bugzilla.suse.com/1052522">SUSE bug 1052522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486645" comment="libIlmImf-2_2-23-2.2.1-3.3.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486646" comment="libIlmImfUtil-2_2-23-2.2.1-3.3.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486647" comment="openexr-devel-2.2.1-3.3.11 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12618</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12618" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12618" ref_url="https://www.suse.com/security/cve/CVE-2017-12618" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003492.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003689.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3325-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00051.html" source="SUSE-SU"/>
    <description>
    Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.3/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12618/">CVE-2017-12618</cve>
	<bugzilla href="https://bugzilla.suse.com/1064990">SUSE bug 1064990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481001" comment="apr-util-devel-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481002" comment="libapr-util1-1.6.1-4.3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488345" comment="libapr-util1-dbd-mysql-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488346" comment="libapr-util1-dbd-pgsql-1.6.1-4.3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488347" comment="libapr-util1-dbd-sqlite3-1.6.1-4.3.8 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12627</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12627" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12627" ref_url="https://www.suse.com/security/cve/CVE-2017-12627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004754.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005349.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007262.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1283-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00099.html" source="SUSE-SU"/>
    <description>
    In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12627/">CVE-2017-12627</cve>
	<bugzilla href="https://bugzilla.suse.com/1083630">SUSE bug 1083630</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334373" comment="xerces-c is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335602" comment="libxerces-c-3_1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339020" comment="libxerces-c-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790340" comment="libxerces-c-3_1-3.1.4-3.3.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790341" comment="libxerces-c-devel-3.1.4-3.3.25 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12652</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12652" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12652" ref_url="https://www.suse.com/security/cve/CVE-2017-12652" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006822.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3060-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:3799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016340.html" source="SUSE-SU"/>
    <description>
    libpng before 1.6.32 does not properly check the length of chunks against the user limit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-28"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12652/">CVE-2017-12652</cve>
	<bugzilla href="https://bugzilla.suse.com/1141493">SUSE bug 1141493</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12672</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12672" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12672" ref_url="https://www.suse.com/security/cve/CVE-2017-12672" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0130-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003612.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0087-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0155-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00058.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12672/">CVE-2017-12672</cve>
	<bugzilla href="https://bugzilla.suse.com/1052720">SUSE bug 1052720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055434">SUSE bug 1055434</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12675</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12675" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12675" ref_url="https://www.suse.com/security/cve/CVE-2017-12675" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0130-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003611.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0132-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003612.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0087-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0155-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00058.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12675/">CVE-2017-12675</cve>
	<bugzilla href="https://bugzilla.suse.com/1052710">SUSE bug 1052710</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12678</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12678" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12678" ref_url="https://www.suse.com/security/cve/CVE-2017-12678" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2185-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00076.html" source="SUSE-SU"/>
    <description>
    In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12678/">CVE-2017-12678</cve>
	<bugzilla href="https://bugzilla.suse.com/1052699">SUSE bug 1052699</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480753" comment="libtag1-1.11.1-2.50 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486504" comment="libtag-devel-1.11.1-2.50 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486505" comment="libtag_c0-1.11.1-2.50 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12791</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12791" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12791" ref_url="https://www.suse.com/security/cve/CVE-2017-12791" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2666-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003279.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008281.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2383-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2822-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1053-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00061.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12791/">CVE-2017-12791</cve>
	<bugzilla href="https://bugzilla.suse.com/1053955">SUSE bug 1053955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1062462">SUSE bug 1062462</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481641" comment="python3-salt-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481642" comment="salt-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481643" comment="salt-bash-completion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481644" comment="salt-doc-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481645" comment="salt-minion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481646" comment="salt-zsh-completion-2019.2.0-4.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488438" comment="salt-api-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488439" comment="salt-cloud-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488440" comment="salt-fish-completion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488441" comment="salt-master-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488442" comment="salt-proxy-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488443" comment="salt-ssh-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488444" comment="salt-syndic-2019.2.0-4.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12799</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12799" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12799" ref_url="https://www.suse.com/security/cve/CVE-2017-12799" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12799/">CVE-2017-12799</cve>
	<bugzilla href="https://bugzilla.suse.com/1053347">SUSE bug 1053347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335833" comment="binutils-gold is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334069" comment="binutils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335832" comment="binutils-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337413" comment="binutils-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342534" comment="libctf-nobfd0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342535" comment="libctf0 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12814</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12814" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12814" ref_url="https://www.suse.com/security/cve/CVE-2017-12814" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-09-23"/>
	<updated date="2023-09-23"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12814/">CVE-2017-12814</cve>
	<bugzilla href="https://bugzilla.suse.com/1057727">SUSE bug 1057727</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336056" comment="perl-32bit is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334114" comment="perl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336057" comment="perl-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337401" comment="perl-base-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336058" comment="perl-doc is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12836</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12836" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12836" ref_url="https://www.suse.com/security/cve/CVE-2017-12836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2419-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003196.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2422-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003198.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2483-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00067.html" source="SUSE-SU"/>
    <description>
    CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12836/">CVE-2017-12836</cve>
	<bugzilla href="https://bugzilla.suse.com/1052481">SUSE bug 1052481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052696">SUSE bug 1052696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052932">SUSE bug 1052932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053364">SUSE bug 1053364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054653">SUSE bug 1054653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059797">SUSE bug 1059797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066430">SUSE bug 1066430</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071709">SUSE bug 1071709</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487632" comment="cvs-1.12.12-2.30 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12837</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12837" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12837" ref_url="https://www.suse.com/security/cve/CVE-2017-12837" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00083.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\N{}' escape and the case-insensitive modifier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12837/">CVE-2017-12837</cve>
	<bugzilla href="https://bugzilla.suse.com/1057724">SUSE bug 1057724</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487781" comment="perl-doc-5.26.1-7.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481617" comment="perl-5.26.1-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481618" comment="perl-base-5.26.1-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481619" comment="perl-base-32bit-5.26.1-7.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12852</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12852" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12852" ref_url="https://www.suse.com/security/cve/CVE-2017-12852" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:3954-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/026133.html" source="SUSE-SU"/>
    <description>
    The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12852/">CVE-2017-12852</cve>
	<bugzilla href="https://bugzilla.suse.com/1053963">SUSE bug 1053963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694255" comment="python2-numpy is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481636" comment="python3-numpy-1.14.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481637" comment="python3-numpy-devel-1.14.0-4.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009694255" comment="python2-numpy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694256" comment="python2-numpy-devel is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12858</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12858" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12858" ref_url="https://www.suse.com/security/cve/CVE-2017-12858" source="SUSE CVE"/>
    <description>
    Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12858/">CVE-2017-12858</cve>
	<bugzilla href="https://bugzilla.suse.com/1055377">SUSE bug 1055377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184178">SUSE bug 1184178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480830" comment="libzip-devel-1.5.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712883" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12883</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12883" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12883" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12883" ref_url="https://www.suse.com/security/cve/CVE-2017-12883" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00083.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12883/">CVE-2017-12883</cve>
	<bugzilla href="https://bugzilla.suse.com/1057721">SUSE bug 1057721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487781" comment="perl-doc-5.26.1-7.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481617" comment="perl-5.26.1-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481618" comment="perl-base-5.26.1-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481619" comment="perl-base-32bit-5.26.1-7.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1289</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-1289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1289" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-1289" ref_url="https://www.suse.com/security/cve/CVE-2017-1289" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
    <description>
    IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1289/">CVE-2017-1289</cve>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712893" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12893</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12893" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12893" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12893" ref_url="https://www.suse.com/security/cve/CVE-2017-12893" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12893/">CVE-2017-12893</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712894" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12894</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12894" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12894" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12894" ref_url="https://www.suse.com/security/cve/CVE-2017-12894" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12894/">CVE-2017-12894</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12895</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12895" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12895" ref_url="https://www.suse.com/security/cve/CVE-2017-12895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12895/">CVE-2017-12895</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12896</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12896" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12896" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12896" ref_url="https://www.suse.com/security/cve/CVE-2017-12896" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12896/">CVE-2017-12896</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12897</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12897" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12897" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12897" ref_url="https://www.suse.com/security/cve/CVE-2017-12897" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12897/">CVE-2017-12897</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12898</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12898" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12898" ref_url="https://www.suse.com/security/cve/CVE-2017-12898" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12898/">CVE-2017-12898</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12899</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12899" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12899" ref_url="https://www.suse.com/security/cve/CVE-2017-12899" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12899/">CVE-2017-12899</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12900</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12900" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12900" ref_url="https://www.suse.com/security/cve/CVE-2017-12900" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12900/">CVE-2017-12900</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12901</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12901" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12901" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12901" ref_url="https://www.suse.com/security/cve/CVE-2017-12901" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12901/">CVE-2017-12901</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12902</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12902" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12902" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12902" ref_url="https://www.suse.com/security/cve/CVE-2017-12902" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12902/">CVE-2017-12902</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12944</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12944" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12944" ref_url="https://www.suse.com/security/cve/CVE-2017-12944" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004934.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004984.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4053-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00061.html" source="SUSE-SU"/>
    <description>
    The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocation failure and application crash) in the TIFFFetchStripThing function in tif_dirread.c during a tiff2pdf invocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12944/">CVE-2017-12944</cve>
	<bugzilla href="https://bugzilla.suse.com/1003874">SUSE bug 1003874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054594">SUSE bug 1054594</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782665" comment="libtiff5-32bit-4.0.9-5.20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335400" comment="libtiff-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782663" comment="libtiff-devel-4.0.9-5.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782664" comment="libtiff5-4.0.9-5.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12955</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12955" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12955" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12955" ref_url="https://www.suse.com/security/cve/CVE-2017-12955" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12955/">CVE-2017-12955</cve>
	<bugzilla href="https://bugzilla.suse.com/1054593">SUSE bug 1054593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12956</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12956" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12956" ref_url="https://www.suse.com/security/cve/CVE-2017-12956" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12956/">CVE-2017-12956</cve>
	<bugzilla href="https://bugzilla.suse.com/1054592">SUSE bug 1054592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334027" comment="exiv2 is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684950" comment="libexiv2-26 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335900" comment="libexiv2-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12957</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12957" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12957" ref_url="https://www.suse.com/security/cve/CVE-2017-12957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12957/">CVE-2017-12957</cve>
	<bugzilla href="https://bugzilla.suse.com/1054590">SUSE bug 1054590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334027" comment="exiv2 is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684950" comment="libexiv2-26 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335900" comment="libexiv2-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12967</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12967" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12967" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12967" ref_url="https://www.suse.com/security/cve/CVE-2017-12967" source="SUSE CVE"/>
    <description>
    The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a malformed tekhex binary.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12967/">CVE-2017-12967</cve>
	<bugzilla href="https://bugzilla.suse.com/1054665">SUSE bug 1054665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335833" comment="binutils-gold is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334069" comment="binutils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335832" comment="binutils-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337413" comment="binutils-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342534" comment="libctf-nobfd0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342535" comment="libctf0 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12982</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12982" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12982" ref_url="https://www.suse.com/security/cve/CVE-2017-12982" source="SUSE CVE"/>
    <description>
    The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service (memory allocation failure) in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12982/">CVE-2017-12982</cve>
	<bugzilla href="https://bugzilla.suse.com/1054696">SUSE bug 1054696</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12985</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12985" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12985" ref_url="https://www.suse.com/security/cve/CVE-2017-12985" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12985/">CVE-2017-12985</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12986</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12986" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12986" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12986" ref_url="https://www.suse.com/security/cve/CVE-2017-12986" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12986/">CVE-2017-12986</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12987</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12987" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12987" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12987" ref_url="https://www.suse.com/security/cve/CVE-2017-12987" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12987/">CVE-2017-12987</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12988</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12988" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12988" ref_url="https://www.suse.com/security/cve/CVE-2017-12988" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12988/">CVE-2017-12988</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12989</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12989" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12989" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12989" ref_url="https://www.suse.com/security/cve/CVE-2017-12989" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12989/">CVE-2017-12989</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12990</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12990" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12990" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12990" ref_url="https://www.suse.com/security/cve/CVE-2017-12990" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12990/">CVE-2017-12990</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12991</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12991" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12991" ref_url="https://www.suse.com/security/cve/CVE-2017-12991" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12991/">CVE-2017-12991</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12992</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12992" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12992" ref_url="https://www.suse.com/security/cve/CVE-2017-12992" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12992/">CVE-2017-12992</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12993</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12993" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12993" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12993" ref_url="https://www.suse.com/security/cve/CVE-2017-12993" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12993/">CVE-2017-12993</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12994</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12994" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12994" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12994" ref_url="https://www.suse.com/security/cve/CVE-2017-12994" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12994/">CVE-2017-12994</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12995</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12995" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12995" ref_url="https://www.suse.com/security/cve/CVE-2017-12995" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12995/">CVE-2017-12995</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12996</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12996" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12996" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12996" ref_url="https://www.suse.com/security/cve/CVE-2017-12996" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12996/">CVE-2017-12996</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12997</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12997" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12997" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12997" ref_url="https://www.suse.com/security/cve/CVE-2017-12997" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12997/">CVE-2017-12997</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712998" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12998</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12998" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12998" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12998" ref_url="https://www.suse.com/security/cve/CVE-2017-12998" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12998/">CVE-2017-12998</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12999</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-12999" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12999" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-12999" ref_url="https://www.suse.com/security/cve/CVE-2017-12999" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12999/">CVE-2017-12999</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13000</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13000" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13000" ref_url="https://www.suse.com/security/cve/CVE-2017-13000" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13000/">CVE-2017-13000</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13001</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13001" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13001" ref_url="https://www.suse.com/security/cve/CVE-2017-13001" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13001/">CVE-2017-13001</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13002</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13002" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13002" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13002" ref_url="https://www.suse.com/security/cve/CVE-2017-13002" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13002/">CVE-2017-13002</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13003</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13003" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13003" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13003" ref_url="https://www.suse.com/security/cve/CVE-2017-13003" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13003/">CVE-2017-13003</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13004</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13004" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13004" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13004" ref_url="https://www.suse.com/security/cve/CVE-2017-13004" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13004/">CVE-2017-13004</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13005</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13005" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13005" ref_url="https://www.suse.com/security/cve/CVE-2017-13005" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13005/">CVE-2017-13005</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13006</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13006" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13006" ref_url="https://www.suse.com/security/cve/CVE-2017-13006" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13006/">CVE-2017-13006</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13007</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13007" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13007" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13007" ref_url="https://www.suse.com/security/cve/CVE-2017-13007" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13007/">CVE-2017-13007</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13008</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13008" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13008" ref_url="https://www.suse.com/security/cve/CVE-2017-13008" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13008/">CVE-2017-13008</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13009</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13009" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13009" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13009" ref_url="https://www.suse.com/security/cve/CVE-2017-13009" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13009/">CVE-2017-13009</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13010</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13010" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13010" ref_url="https://www.suse.com/security/cve/CVE-2017-13010" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13010/">CVE-2017-13010</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13011</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13011" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13011" ref_url="https://www.suse.com/security/cve/CVE-2017-13011" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003283.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13011/">CVE-2017-13011</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123142">SUSE bug 1123142</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13012</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13012" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13012" ref_url="https://www.suse.com/security/cve/CVE-2017-13012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13012/">CVE-2017-13012</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13013</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13013" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13013" ref_url="https://www.suse.com/security/cve/CVE-2017-13013" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13013/">CVE-2017-13013</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713014" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13014</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13014" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13014" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13014" ref_url="https://www.suse.com/security/cve/CVE-2017-13014" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13014/">CVE-2017-13014</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13015</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13015" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13015" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13015" ref_url="https://www.suse.com/security/cve/CVE-2017-13015" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13015/">CVE-2017-13015</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13016</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13016" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13016" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13016" ref_url="https://www.suse.com/security/cve/CVE-2017-13016" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13016/">CVE-2017-13016</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13017</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13017" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13017" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13017" ref_url="https://www.suse.com/security/cve/CVE-2017-13017" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13017/">CVE-2017-13017</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13018</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13018" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13018" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13018" ref_url="https://www.suse.com/security/cve/CVE-2017-13018" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13018/">CVE-2017-13018</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13019</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13019" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13019" ref_url="https://www.suse.com/security/cve/CVE-2017-13019" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13019/">CVE-2017-13019</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13020</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13020" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13020" ref_url="https://www.suse.com/security/cve/CVE-2017-13020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13020/">CVE-2017-13020</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13021</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13021" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13021" ref_url="https://www.suse.com/security/cve/CVE-2017-13021" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13021/">CVE-2017-13021</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13022</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13022" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13022" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13022" ref_url="https://www.suse.com/security/cve/CVE-2017-13022" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13022/">CVE-2017-13022</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13023</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13023" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13023" ref_url="https://www.suse.com/security/cve/CVE-2017-13023" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13023/">CVE-2017-13023</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13024</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13024" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13024" ref_url="https://www.suse.com/security/cve/CVE-2017-13024" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13024/">CVE-2017-13024</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13025</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13025" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13025" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13025" ref_url="https://www.suse.com/security/cve/CVE-2017-13025" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13025/">CVE-2017-13025</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13026</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13026" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13026" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13026" ref_url="https://www.suse.com/security/cve/CVE-2017-13026" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13026/">CVE-2017-13026</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713027" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13027</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13027" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13027" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13027" ref_url="https://www.suse.com/security/cve/CVE-2017-13027" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13027/">CVE-2017-13027</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13028</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13028" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13028" ref_url="https://www.suse.com/security/cve/CVE-2017-13028" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13028/">CVE-2017-13028</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13029</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13029" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13029" ref_url="https://www.suse.com/security/cve/CVE-2017-13029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13029/">CVE-2017-13029</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13030</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13030" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13030" ref_url="https://www.suse.com/security/cve/CVE-2017-13030" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13030/">CVE-2017-13030</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13031</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13031" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13031" ref_url="https://www.suse.com/security/cve/CVE-2017-13031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13031/">CVE-2017-13031</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13032</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13032" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13032" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13032" ref_url="https://www.suse.com/security/cve/CVE-2017-13032" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13032/">CVE-2017-13032</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13033</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13033" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13033" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13033" ref_url="https://www.suse.com/security/cve/CVE-2017-13033" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13033/">CVE-2017-13033</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13034</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13034" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13034" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13034" ref_url="https://www.suse.com/security/cve/CVE-2017-13034" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13034/">CVE-2017-13034</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13035</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13035" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13035" ref_url="https://www.suse.com/security/cve/CVE-2017-13035" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13035/">CVE-2017-13035</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713036" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13036</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13036" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13036" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13036" ref_url="https://www.suse.com/security/cve/CVE-2017-13036" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13036/">CVE-2017-13036</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13037</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13037" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13037" ref_url="https://www.suse.com/security/cve/CVE-2017-13037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13037/">CVE-2017-13037</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13038</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13038" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13038" ref_url="https://www.suse.com/security/cve/CVE-2017-13038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13038/">CVE-2017-13038</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13039</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13039" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13039" ref_url="https://www.suse.com/security/cve/CVE-2017-13039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13039/">CVE-2017-13039</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13040</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13040" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13040" ref_url="https://www.suse.com/security/cve/CVE-2017-13040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13040/">CVE-2017-13040</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13041</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13041" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13041" ref_url="https://www.suse.com/security/cve/CVE-2017-13041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13041/">CVE-2017-13041</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13042</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13042" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13042" ref_url="https://www.suse.com/security/cve/CVE-2017-13042" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13042/">CVE-2017-13042</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13043</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13043" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13043" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13043" ref_url="https://www.suse.com/security/cve/CVE-2017-13043" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13043/">CVE-2017-13043</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13044</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13044" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13044" ref_url="https://www.suse.com/security/cve/CVE-2017-13044" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13044/">CVE-2017-13044</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13045</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13045" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13045" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13045" ref_url="https://www.suse.com/security/cve/CVE-2017-13045" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13045/">CVE-2017-13045</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13046</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13046" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13046" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13046" ref_url="https://www.suse.com/security/cve/CVE-2017-13046" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13046/">CVE-2017-13046</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713047" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13047</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13047" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13047" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13047" ref_url="https://www.suse.com/security/cve/CVE-2017-13047" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13047/">CVE-2017-13047</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13048</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13048" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13048" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13048" ref_url="https://www.suse.com/security/cve/CVE-2017-13048" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13048/">CVE-2017-13048</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13049</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13049" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13049" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13049" ref_url="https://www.suse.com/security/cve/CVE-2017-13049" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13049/">CVE-2017-13049</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13050</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13050" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13050" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13050" ref_url="https://www.suse.com/security/cve/CVE-2017-13050" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13050/">CVE-2017-13050</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13051</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13051" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13051" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13051" ref_url="https://www.suse.com/security/cve/CVE-2017-13051" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13051/">CVE-2017-13051</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13052</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13052" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13052" ref_url="https://www.suse.com/security/cve/CVE-2017-13052" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13052/">CVE-2017-13052</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13053</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13053" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13053" ref_url="https://www.suse.com/security/cve/CVE-2017-13053" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13053/">CVE-2017-13053</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13054</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13054" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13054" ref_url="https://www.suse.com/security/cve/CVE-2017-13054" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13054/">CVE-2017-13054</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13055</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13055" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13055" ref_url="https://www.suse.com/security/cve/CVE-2017-13055" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13055/">CVE-2017-13055</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13077</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13077" ref_url="https://www.suse.com/security/cve/CVE-2017-13077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID7022107" ref_url="https://www.suse.com/support/kb/doc/?id=7022107" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13077/">CVE-2017-13077</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063963">SUSE bug 1063963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179588">SUSE bug 1179588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334489" comment="wpa_supplicant is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13078</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13078" ref_url="https://www.suse.com/security/cve/CVE-2017-13078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID7022107" ref_url="https://www.suse.com/support/kb/doc/?id=7022107" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13078/">CVE-2017-13078</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063667">SUSE bug 1063667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179588">SUSE bug 1179588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334489" comment="wpa_supplicant is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13079</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13079" ref_url="https://www.suse.com/security/cve/CVE-2017-13079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID7022107" ref_url="https://www.suse.com/support/kb/doc/?id=7022107" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13079/">CVE-2017-13079</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179588">SUSE bug 1179588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334489" comment="wpa_supplicant is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13080</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13080" ref_url="https://www.suse.com/security/cve/CVE-2017-13080" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3072-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3116-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3120-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3121-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3125-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3129-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3132-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3136-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3145-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3146-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3158-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3159-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3160-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3165-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID7022107" ref_url="https://www.suse.com/support/kb/doc/?id=7022107" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2846-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13080/">CVE-2017-13080</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063667">SUSE bug 1063667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063671">SUSE bug 1063671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066295">SUSE bug 1066295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105108">SUSE bug 1105108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178872">SUSE bug 1178872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179588">SUSE bug 1179588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334489" comment="wpa_supplicant is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481206" comment="kernel-firmware-20190118-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481207" comment="ucode-amd-20190118-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13081</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13081" ref_url="https://www.suse.com/security/cve/CVE-2017-13081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID7022107" ref_url="https://www.suse.com/support/kb/doc/?id=7022107" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13081/">CVE-2017-13081</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066295">SUSE bug 1066295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105108">SUSE bug 1105108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179588">SUSE bug 1179588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334489" comment="wpa_supplicant is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481206" comment="kernel-firmware-20190118-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481207" comment="ucode-amd-20190118-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13082</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13082" ref_url="https://www.suse.com/security/cve/CVE-2017-13082" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="TID7022107" ref_url="https://www.suse.com/support/kb/doc/?id=7022107" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0222-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13082/">CVE-2017-13082</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179588">SUSE bug 1179588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334489" comment="wpa_supplicant is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13084</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13084" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13084" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13084" ref_url="https://www.suse.com/security/cve/CVE-2017-13084" source="SUSE CVE"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13084/">CVE-2017-13084</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334489" comment="wpa_supplicant is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13086</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13086" ref_url="https://www.suse.com/security/cve/CVE-2017-13086" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13086/">CVE-2017-13086</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179588">SUSE bug 1179588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334489" comment="wpa_supplicant is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13087</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13087" ref_url="https://www.suse.com/security/cve/CVE-2017-13087" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13087/">CVE-2017-13087</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179588">SUSE bug 1179588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334489" comment="wpa_supplicant is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13088</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13088" ref_url="https://www.suse.com/security/cve/CVE-2017-13088" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2752-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011164.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2755-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2053-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2059-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/" source="SUSE-SU"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13088/">CVE-2017-13088</cve>
	<bugzilla href="https://bugzilla.suse.com/1056061">SUSE bug 1056061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063479">SUSE bug 1063479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179588">SUSE bug 1179588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334489" comment="wpa_supplicant is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13089</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13089" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13089" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13089" ref_url="https://www.suse.com/security/cve/CVE-2017-13089" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2871-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2884-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00081.html" source="SUSE-SU"/>
    <description>
    The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13089/">CVE-2017-13089</cve>
	<bugzilla href="https://bugzilla.suse.com/1064715">SUSE bug 1064715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481671" comment="wget-1.19.5-3.6.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13090</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13090" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13090" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13090" ref_url="https://www.suse.com/security/cve/CVE-2017-13090" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2871-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2884-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00081.html" source="SUSE-SU"/>
    <description>
    The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to read the chunk in pieces of 8192 bytes by using the MIN() macro, but ends up passing the negative chunk length to retr.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. The attacker can corrupt malloc metadata after the allocated buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13090/">CVE-2017-13090</cve>
	<bugzilla href="https://bugzilla.suse.com/1064716">SUSE bug 1064716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481671" comment="wget-1.19.5-3.6.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13166</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13166" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13166" ref_url="https://www.suse.com/security/cve/CVE-2017-13166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0989-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0992-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0994-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0995-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0997-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0999-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1000-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1001-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1002-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1003-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1004-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1005-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1006-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003924.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1009-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003925.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1011-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003928.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003929.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1014-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1016-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1018-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1021-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1027-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1028-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1029-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1030-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1032-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1033-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004114.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004115.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004118.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004120.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004121.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004123.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004124.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1517-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004125.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004126.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004127.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004132.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004134.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1529-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004137.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004138.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004139.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004140.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004141.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004142.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1537-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004144.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004145.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004148.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1543-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004150.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004151.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1548-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004152.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1637-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004174.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1641-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004175.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004176.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1644-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004178.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1645-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004179.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004180.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00054.html" source="SUSE-SU"/>
    <description>
    An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13166/">CVE-2017-13166</cve>
	<bugzilla href="https://bugzilla.suse.com/1072865">SUSE bug 1072865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085447">SUSE bug 1085447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13168</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13168" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13168" ref_url="https://www.suse.com/security/cve/CVE-2017-13168" source="SUSE CVE"/>
    <description>
    An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-13168/">CVE-2017-13168</cve>
	<bugzilla href="https://bugzilla.suse.com/1072831">SUSE bug 1072831</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13194</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13194" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13194" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13194" ref_url="https://www.suse.com/security/cve/CVE-2017-13194" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0181-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0210-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00088.html" source="SUSE-SU"/>
    <description>
    A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13194/">CVE-2017-13194</cve>
	<bugzilla href="https://bugzilla.suse.com/1075992">SUSE bug 1075992</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480779" comment="libvpx4-1.6.1-4.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486513" comment="libvpx-devel-1.6.1-4.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13215</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13215" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13215" ref_url="https://www.suse.com/security/cve/CVE-2017-13215" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0555-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0660-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html" source="SUSE-SU"/>
    <description>
    A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References: Upstream kernel.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13215/">CVE-2017-13215</cve>
	<bugzilla href="https://bugzilla.suse.com/1075908">SUSE bug 1075908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13220</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13220" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13220" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13220" ref_url="https://www.suse.com/security/cve/CVE-2017-13220" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1220-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1221-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00021.html" source="SUSE-SU"/>
    <description>
    An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-13220/">CVE-2017-13220</cve>
	<bugzilla href="https://bugzilla.suse.com/1076537">SUSE bug 1076537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13672</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13672" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13672" ref_url="https://www.suse.com/security/cve/CVE-2017-13672" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13921-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201913921-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html" source="SUSE-SU"/>
    <description>
    QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13672/">CVE-2017-13672</cve>
	<bugzilla href="https://bugzilla.suse.com/1056334">SUSE bug 1056334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056336">SUSE bug 1056336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084604">SUSE bug 1084604</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13673</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13673" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13673" ref_url="https://www.suse.com/security/cve/CVE-2017-13673" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005153.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005184.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html" source="SUSE-SU"/>
    <description>
    The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion failure) in the cpu_physical_memory_snapshot_get_dirty function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13673/">CVE-2017-13673</cve>
	<bugzilla href="https://bugzilla.suse.com/1056386">SUSE bug 1056386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056387">SUSE bug 1056387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084604">SUSE bug 1084604</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13685</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13685" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13685" ref_url="https://www.suse.com/security/cve/CVE-2017-13685" source="SUSE CVE"/>
    <description>
    The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13685/">CVE-2017-13685</cve>
	<bugzilla href="https://bugzilla.suse.com/1056541">SUSE bug 1056541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335190" comment="libsqlite3-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335191" comment="libsqlite3-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333983" comment="sqlite3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335192" comment="sqlite3-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009714563" comment="sqlite3-tcl is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13687</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13687" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13687" ref_url="https://www.suse.com/security/cve/CVE-2017-13687" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13687/">CVE-2017-13687</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13688</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13688" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13688" ref_url="https://www.suse.com/security/cve/CVE-2017-13688" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13688/">CVE-2017-13688</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13689</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13689" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13689" ref_url="https://www.suse.com/security/cve/CVE-2017-13689" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13689/">CVE-2017-13689</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13690</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13690" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13690" ref_url="https://www.suse.com/security/cve/CVE-2017-13690" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13690/">CVE-2017-13690</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13693</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13693" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13693" ref_url="https://www.suse.com/security/cve/CVE-2017-13693" source="SUSE CVE"/>
    <description>
    The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-13693/">CVE-2017-13693</cve>
	<bugzilla href="https://bugzilla.suse.com/1055713">SUSE bug 1055713</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13694</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13694" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13694" ref_url="https://www.suse.com/security/cve/CVE-2017-13694" source="SUSE CVE"/>
    <description>
    The acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobject.c in the Linux kernel through 4.12.9 does not flush the node and node_ext caches and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-13694/">CVE-2017-13694</cve>
	<bugzilla href="https://bugzilla.suse.com/1055705">SUSE bug 1055705</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13695</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13695" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13695" ref_url="https://www.suse.com/security/cve/CVE-2017-13695" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011285.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011287.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013765.html" source="SUSE-SU"/>
    <description>
    The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-11"/>
	<updated date="2023-02-16"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-13695/">CVE-2017-13695</cve>
	<bugzilla href="https://bugzilla.suse.com/1055710">SUSE bug 1055710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009692158" comment="kernel-default-livepatch-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692159" comment="kernel-default-livepatch-devel-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692160" comment="kernel-livepatch-4_12_14-150100_197_114-default-1-150100.3.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009692394" comment="cluster-md-kmp-default-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692395" comment="dlm-kmp-default-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692396" comment="gfs2-kmp-default-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692397" comment="ocfs2-kmp-default-4.12.14-150100.197.114.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009692755" comment="kernel-default-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692756" comment="kernel-default-base-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692757" comment="kernel-default-devel-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692758" comment="kernel-devel-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692759" comment="kernel-docs-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692760" comment="kernel-macros-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692761" comment="kernel-obs-build-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692762" comment="kernel-source-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692763" comment="kernel-syms-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009697581" comment="reiserfs-kmp-default-4.12.14-150100.197.114.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009692755" comment="kernel-default-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692756" comment="kernel-default-base-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692757" comment="kernel-default-devel-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692758" comment="kernel-devel-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692759" comment="kernel-docs-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692760" comment="kernel-macros-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692761" comment="kernel-obs-build-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692762" comment="kernel-source-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692763" comment="kernel-syms-4.12.14-150100.197.114.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009693271" comment="kernel-default-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693272" comment="kernel-default-base-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693273" comment="kernel-default-devel-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692758" comment="kernel-devel-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692759" comment="kernel-docs-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692760" comment="kernel-macros-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693274" comment="kernel-obs-build-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692762" comment="kernel-source-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693275" comment="kernel-syms-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693276" comment="reiserfs-kmp-default-4.12.14-150100.197.114.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009693404" comment="kernel-default-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693405" comment="kernel-default-base-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693406" comment="kernel-default-devel-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693407" comment="kernel-default-man-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692758" comment="kernel-devel-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692759" comment="kernel-docs-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692760" comment="kernel-macros-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693408" comment="kernel-obs-build-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692762" comment="kernel-source-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693409" comment="kernel-syms-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693410" comment="reiserfs-kmp-default-4.12.14-150100.197.114.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009693769" comment="kernel-default-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693770" comment="kernel-default-base-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693771" comment="kernel-default-devel-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692758" comment="kernel-devel-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692759" comment="kernel-docs-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692760" comment="kernel-macros-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693772" comment="kernel-obs-build-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692762" comment="kernel-source-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693773" comment="kernel-syms-4.12.14-150100.197.114.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693774" comment="reiserfs-kmp-default-4.12.14-150100.197.114.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13711</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13711" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13711" ref_url="https://www.suse.com/security/cve/CVE-2017-13711" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13711/">CVE-2017-13711</cve>
	<bugzilla href="https://bugzilla.suse.com/1056291">SUSE bug 1056291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13720</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13720" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13720" ref_url="https://www.suse.com/security/cve/CVE-2017-13720" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003693.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3256-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0343-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00005.html" source="SUSE-SU"/>
    <description>
    In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of service). This occurs because '\0' characters are incorrectly skipped in situations involving ? characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-13720/">CVE-2017-13720</cve>
	<bugzilla href="https://bugzilla.suse.com/1054285">SUSE bug 1054285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159415">SUSE bug 1159415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335147" comment="xorg-x11-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333972" comment="xorg-x11-libs is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480420" comment="libXfont-devel-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13721</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13721" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13721" ref_url="https://www.suse.com/security/cve/CVE-2017-13721" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003402.html" source="SUSE-SU"/>
    <description>
    In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-13721/">CVE-2017-13721</cve>
	<bugzilla href="https://bugzilla.suse.com/1051150">SUSE bug 1051150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052984">SUSE bug 1052984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487792" comment="xorg-x11-server-sdk-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489170" comment="xorg-x11-server-wayland-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481676" comment="xorg-x11-server-1.20.3-12.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481677" comment="xorg-x11-server-extra-1.20.3-12.29 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13722</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13722" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13722" ref_url="https://www.suse.com/security/cve/CVE-2017-13722" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003693.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3256-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0343-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00005.html" source="SUSE-SU"/>
    <description>
    In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash of the X server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13722/">CVE-2017-13722</cve>
	<bugzilla href="https://bugzilla.suse.com/1049692">SUSE bug 1049692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159415">SUSE bug 1159415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480420" comment="libXfont-devel-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13723</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13723" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13723" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13723" ref_url="https://www.suse.com/security/cve/CVE-2017-13723" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003402.html" source="SUSE-SU"/>
    <description>
    In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13723/">CVE-2017-13723</cve>
	<bugzilla href="https://bugzilla.suse.com/1051150">SUSE bug 1051150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052984">SUSE bug 1052984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487792" comment="xorg-x11-server-sdk-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489170" comment="xorg-x11-server-wayland-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481676" comment="xorg-x11-server-1.20.3-12.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481677" comment="xorg-x11-server-extra-1.20.3-12.29 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13725</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13725" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13725" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13725" ref_url="https://www.suse.com/security/cve/CVE-2017-13725" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14191-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00093.html" source="SUSE-SU"/>
    <description>
    The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13725/">CVE-2017-13725</cve>
	<bugzilla href="https://bugzilla.suse.com/1050219">SUSE bug 1050219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050222">SUSE bug 1050222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050225">SUSE bug 1050225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057247">SUSE bug 1057247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13735</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13735" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13735" ref_url="https://www.suse.com/security/cve/CVE-2017-13735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003548.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010775.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2638-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00007.html" source="SUSE-SU"/>
    <description>
    There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13735/">CVE-2017-13735</cve>
	<bugzilla href="https://bugzilla.suse.com/1056170">SUSE bug 1056170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060321">SUSE bug 1060321</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489076" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489077" comment="libraw16-0.18.9-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13738</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13738" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13738" ref_url="https://www.suse.com/security/cve/CVE-2017-13738" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003260.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00008.html" source="SUSE-SU"/>
    <description>
    There is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346 in Liblouis 3.2.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13738/">CVE-2017-13738</cve>
	<bugzilla href="https://bugzilla.suse.com/1056105">SUSE bug 1056105</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486872" comment="liblouis-data-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486873" comment="liblouis-devel-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486874" comment="liblouis14-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486875" comment="python3-louis-3.3.0-4.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13739</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13739" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13739" ref_url="https://www.suse.com/security/cve/CVE-2017-13739" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003262.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00008.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the function resolveSubtable() in compileTranslationTable.c. It will lead to denial of service or remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13739/">CVE-2017-13739</cve>
	<bugzilla href="https://bugzilla.suse.com/1056101">SUSE bug 1056101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486872" comment="liblouis-data-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486873" comment="liblouis-devel-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486874" comment="liblouis14-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486875" comment="python3-louis-3.3.0-4.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13740</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13740" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13740" ref_url="https://www.suse.com/security/cve/CVE-2017-13740" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003262.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00008.html" source="SUSE-SU"/>
    <description>
    There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will lead to denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13740/">CVE-2017-13740</cve>
	<bugzilla href="https://bugzilla.suse.com/1056097">SUSE bug 1056097</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486872" comment="liblouis-data-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486873" comment="liblouis-devel-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486874" comment="liblouis14-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486875" comment="python3-louis-3.3.0-4.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13741</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13741" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13741" ref_url="https://www.suse.com/security/cve/CVE-2017-13741" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003262.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00008.html" source="SUSE-SU"/>
    <description>
    There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13741/">CVE-2017-13741</cve>
	<bugzilla href="https://bugzilla.suse.com/1056095">SUSE bug 1056095</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486872" comment="liblouis-data-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486873" comment="liblouis-devel-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486874" comment="liblouis14-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486875" comment="python3-louis-3.3.0-4.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13742</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13742" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13742" ref_url="https://www.suse.com/security/cve/CVE-2017-13742" source="SUSE CVE"/>
    <description>
    There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13742/">CVE-2017-13742</cve>
	<bugzilla href="https://bugzilla.suse.com/1056093">SUSE bug 1056093</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486872" comment="liblouis-data-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486873" comment="liblouis-devel-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486874" comment="liblouis14-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486875" comment="python3-louis-3.3.0-4.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13743</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13743" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13743" ref_url="https://www.suse.com/security/cve/CVE-2017-13743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003260.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003262.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00008.html" source="SUSE-SU"/>
    <description>
    There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13743/">CVE-2017-13743</cve>
	<bugzilla href="https://bugzilla.suse.com/1056090">SUSE bug 1056090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486872" comment="liblouis-data-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486873" comment="liblouis-devel-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486874" comment="liblouis14-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486875" comment="python3-louis-3.3.0-4.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13744</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13744" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13744" ref_url="https://www.suse.com/security/cve/CVE-2017-13744" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003260.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2639-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00008.html" source="SUSE-SU"/>
    <description>
    There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13744/">CVE-2017-13744</cve>
	<bugzilla href="https://bugzilla.suse.com/1056088">SUSE bug 1056088</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486872" comment="liblouis-data-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486873" comment="liblouis-devel-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486874" comment="liblouis14-3.3.0-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486875" comment="python3-louis-3.3.0-4.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13757</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13757" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13757" ref_url="https://www.suse.com/security/cve/CVE-2017-13757" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13757/">CVE-2017-13757</cve>
	<bugzilla href="https://bugzilla.suse.com/1056312">SUSE bug 1056312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13764</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13764" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13764" ref_url="https://www.suse.com/security/cve/CVE-2017-13764" source="SUSE CVE"/>
    <description>
    In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13764/">CVE-2017-13764</cve>
	<bugzilla href="https://bugzilla.suse.com/1056250">SUSE bug 1056250</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13765</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13765" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13765" ref_url="https://www.suse.com/security/cve/CVE-2017-13765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003581.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2349-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00008.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13765/">CVE-2017-13765</cve>
	<bugzilla href="https://bugzilla.suse.com/1056251">SUSE bug 1056251</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13766</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13766" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13766" ref_url="https://www.suse.com/security/cve/CVE-2017-13766" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003581.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2349-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00008.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13766/">CVE-2017-13766</cve>
	<bugzilla href="https://bugzilla.suse.com/1056249">SUSE bug 1056249</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13767</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13767" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13767" ref_url="https://www.suse.com/security/cve/CVE-2017-13767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003581.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2349-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00008.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-msdp.c by adding length validation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13767/">CVE-2017-13767</cve>
	<bugzilla href="https://bugzilla.suse.com/1056248">SUSE bug 1056248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13788</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13788" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13788" ref_url="https://www.suse.com/security/cve/CVE-2017-13788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13788/">CVE-2017-13788</cve>
	<bugzilla href="https://bugzilla.suse.com/1069925">SUSE bug 1069925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13798</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13798" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13798" ref_url="https://www.suse.com/security/cve/CVE-2017-13798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13798/">CVE-2017-13798</cve>
	<bugzilla href="https://bugzilla.suse.com/1069925">SUSE bug 1069925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13803</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13803" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13803" ref_url="https://www.suse.com/security/cve/CVE-2017-13803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13803/">CVE-2017-13803</cve>
	<bugzilla href="https://bugzilla.suse.com/1069925">SUSE bug 1069925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13856</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13856" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13856" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13856" ref_url="https://www.suse.com/security/cve/CVE-2017-13856" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13856/">CVE-2017-13856</cve>
	<bugzilla href="https://bugzilla.suse.com/1073654">SUSE bug 1073654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13866</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13866" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13866" ref_url="https://www.suse.com/security/cve/CVE-2017-13866" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13866/">CVE-2017-13866</cve>
	<bugzilla href="https://bugzilla.suse.com/1073654">SUSE bug 1073654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13870</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13870" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13870" ref_url="https://www.suse.com/security/cve/CVE-2017-13870" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13870/">CVE-2017-13870</cve>
	<bugzilla href="https://bugzilla.suse.com/1073654">SUSE bug 1073654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13884</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13884" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13884" ref_url="https://www.suse.com/security/cve/CVE-2017-13884" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13884/">CVE-2017-13884</cve>
	<bugzilla href="https://bugzilla.suse.com/1075775">SUSE bug 1075775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077535">SUSE bug 1077535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13885</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-13885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13885" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-13885" ref_url="https://www.suse.com/security/cve/CVE-2017-13885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004781.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00071.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13885/">CVE-2017-13885</cve>
	<bugzilla href="https://bugzilla.suse.com/1075775">SUSE bug 1075775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077535">SUSE bug 1077535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14033</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14033" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14033" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14033" ref_url="https://www.suse.com/security/cve/CVE-2017-14033" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
    <description>
    The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14033/">CVE-2017-14033</cve>
	<bugzilla href="https://bugzilla.suse.com/1058757">SUSE bug 1058757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14039</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14039" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14039" ref_url="https://www.suse.com/security/cve/CVE-2017-14039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2685-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2686-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00032.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14039/">CVE-2017-14039</cve>
	<bugzilla href="https://bugzilla.suse.com/1056622">SUSE bug 1056622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057511">SUSE bug 1057511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14040</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14040" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14040" ref_url="https://www.suse.com/security/cve/CVE-2017-14040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2685-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2686-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00032.html" source="SUSE-SU"/>
    <description>
    An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14040/">CVE-2017-14040</cve>
	<bugzilla href="https://bugzilla.suse.com/1056621">SUSE bug 1056621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14041</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14041" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14041" ref_url="https://www.suse.com/security/cve/CVE-2017-14041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2685-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2686-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00032.html" source="SUSE-SU"/>
    <description>
    A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14041/">CVE-2017-14041</cve>
	<bugzilla href="https://bugzilla.suse.com/1056562">SUSE bug 1056562</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14051</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14051" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14051" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14051" ref_url="https://www.suse.com/security/cve/CVE-2017-14051" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2495-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00057.html" source="SUSE-SU"/>
    <description>
    An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14051/">CVE-2017-14051</cve>
	<bugzilla href="https://bugzilla.suse.com/1056588">SUSE bug 1056588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14054</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14054" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14054" ref_url="https://www.suse.com/security/cve/CVE-2017-14054" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but does not contain sufficient backing data, is provided, the first type==4 loop would consume huge CPU resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14054/">CVE-2017-14054</cve>
	<bugzilla href="https://bugzilla.suse.com/1056765">SUSE bug 1056765</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14055</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14055" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14055" ref_url="https://www.suse.com/security/cve/CVE-2017-14055" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but does not contain sufficient backing data, is provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14055/">CVE-2017-14055</cve>
	<bugzilla href="https://bugzilla.suse.com/1056766">SUSE bug 1056766</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14056</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14056" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14056" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14056" ref_url="https://www.suse.com/security/cve/CVE-2017-14056" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but does not contain sufficient backing data, is provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF check inside these loops.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14056/">CVE-2017-14056</cve>
	<bugzilla href="https://bugzilla.suse.com/1056760">SUSE bug 1056760</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714057" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14057</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14057" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14057" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14057" ref_url="https://www.suse.com/security/cve/CVE-2017-14057" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14057/">CVE-2017-14057</cve>
	<bugzilla href="https://bugzilla.suse.com/1056761">SUSE bug 1056761</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714058" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14058</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14058" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14058" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14058" ref_url="https://www.suse.com/security/cve/CVE-2017-14058" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service (infinite loop).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14058/">CVE-2017-14058</cve>
	<bugzilla href="https://bugzilla.suse.com/1056762">SUSE bug 1056762</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714059" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14059</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14059" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14059" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14059" ref_url="https://www.suse.com/security/cve/CVE-2017-14059" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14059/">CVE-2017-14059</cve>
	<bugzilla href="https://bugzilla.suse.com/1056763">SUSE bug 1056763</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14061</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14061" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14061" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14061" ref_url="https://www.suse.com/security/cve/CVE-2017-14061" source="SUSE CVE"/>
    <description>
    Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-11"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14061/">CVE-2017-14061</cve>
	<bugzilla href="https://bugzilla.suse.com/1056451">SUSE bug 1056451</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009659677" comment="libidn-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338976" comment="libidn11 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338977" comment="libidn11-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659678" comment="libidn2-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659679" comment="libidn2-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659680" comment="libidn2-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14062</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14062" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14062" ref_url="https://www.suse.com/security/cve/CVE-2017-14062" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003874.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003879.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0891-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14062/">CVE-2017-14062</cve>
	<bugzilla href="https://bugzilla.suse.com/1056450">SUSE bug 1056450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087709">SUSE bug 1087709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118435">SUSE bug 1118435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123123">SUSE bug 1123123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173590">SUSE bug 1173590</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480552" comment="libidn-devel-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480553" comment="libidn11-1.34-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481380" comment="libidn11-32bit-1.34-1.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14064</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14064" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14064" ref_url="https://www.suse.com/security/cve/CVE-2017-14064" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
    <description>
    Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is not the length stored in space_len.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-14064/">CVE-2017-14064</cve>
	<bugzilla href="https://bugzilla.suse.com/1056782">SUSE bug 1056782</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14106</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14106" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14106" ref_url="https://www.suse.com/security/cve/CVE-2017-14106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2495-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00057.html" source="SUSE-SU"/>
    <description>
    The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14106/">CVE-2017-14106</cve>
	<bugzilla href="https://bugzilla.suse.com/1056982">SUSE bug 1056982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14107</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14107" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14107" ref_url="https://www.suse.com/security/cve/CVE-2017-14107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003255.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2550-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00096.html" source="SUSE-SU"/>
    <description>
    The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14107/">CVE-2017-14107</cve>
	<bugzilla href="https://bugzilla.suse.com/1056996">SUSE bug 1056996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480830" comment="libzip-devel-1.5.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14128</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14128" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14128" ref_url="https://www.suse.com/security/cve/CVE-2017-14128" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14128/">CVE-2017-14128</cve>
	<bugzilla href="https://bugzilla.suse.com/1057139">SUSE bug 1057139</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14129</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14129" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14129" ref_url="https://www.suse.com/security/cve/CVE-2017-14129" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parse_comp_unit heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14129/">CVE-2017-14129</cve>
	<bugzilla href="https://bugzilla.suse.com/1057144">SUSE bug 1057144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14130</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14130" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14130" ref_url="https://www.suse.com/security/cve/CVE-2017-14130" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (_bfd_elf_attr_strdup heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14130/">CVE-2017-14130</cve>
	<bugzilla href="https://bugzilla.suse.com/1057149">SUSE bug 1057149</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14132</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14132" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14132" ref_url="https://www.suse.com/security/cve/CVE-2017-14132" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14132/">CVE-2017-14132</cve>
	<bugzilla href="https://bugzilla.suse.com/1057152">SUSE bug 1057152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492479" comment="libjasper4-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495468" comment="libjasper-devel-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497875" comment="jasper-2.0.14-3.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14140</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14140" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14140" ref_url="https://www.suse.com/security/cve/CVE-2017-14140" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2694-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
    <description>
    The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-14140/">CVE-2017-14140</cve>
	<bugzilla href="https://bugzilla.suse.com/1057179">SUSE bug 1057179</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714151" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14151</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14151" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14151" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14151" ref_url="https://www.suse.com/security/cve/CVE-2017-14151" source="SUSE CVE"/>
    <description>
    An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_mqc_flush in lib/openjp2/mqc.c and opj_t1_encode_cblk in lib/openjp2/t1.c) or possibly remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14151/">CVE-2017-14151</cve>
	<bugzilla href="https://bugzilla.suse.com/1057336">SUSE bug 1057336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14152</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14152" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14152" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14152" ref_url="https://www.suse.com/security/cve/CVE-2017-14152" source="SUSE CVE"/>
    <description>
    A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c and opj_j2k_write_sot in lib/openjp2/j2k.c) or possibly remote code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14152/">CVE-2017-14152</cve>
	<bugzilla href="https://bugzilla.suse.com/1057335">SUSE bug 1057335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057511">SUSE bug 1057511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14160</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14160" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14160" ref_url="https://www.suse.com/security/cve/CVE-2017-14160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00084.html" source="SUSE-SU"/>
    <description>
    The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14160/">CVE-2017-14160</cve>
	<bugzilla href="https://bugzilla.suse.com/1059812">SUSE bug 1059812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091072">SUSE bug 1091072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481532" comment="libvorbis-devel-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14164</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14164" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14164" ref_url="https://www.suse.com/security/cve/CVE-2017-14164" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2685-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2686-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00032.html" source="SUSE-SU"/>
    <description>
    A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c) or possibly remote code execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14152.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14164/">CVE-2017-14164</cve>
	<bugzilla href="https://bugzilla.suse.com/1057511">SUSE bug 1057511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14166</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14166" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14166" ref_url="https://www.suse.com/security/cve/CVE-2017-14166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004927.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3717-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00017.html" source="SUSE-SU"/>
    <description>
    libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14166/">CVE-2017-14166</cve>
	<bugzilla href="https://bugzilla.suse.com/1057514">SUSE bug 1057514</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631087" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631088" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631089" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631090" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631091" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631092" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631093" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631094" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631095" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631096" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631097" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631098" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14167</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14167" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14167" ref_url="https://www.suse.com/security/cve/CVE-2017-14167" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14167/">CVE-2017-14167</cve>
	<bugzilla href="https://bugzilla.suse.com/1057585">SUSE bug 1057585</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14169</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14169" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14169" ref_url="https://www.suse.com/security/cve/CVE-2017-14169" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -&gt; 2.4, an integer signedness error might occur when a crafted file, which claims a large "item_num" field such as 0xffffffff, is provided. As a result, the variable "item_num" turns negative, bypassing the check for a large value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14169/">CVE-2017-14169</cve>
	<bugzilla href="https://bugzilla.suse.com/1057536">SUSE bug 1057536</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14170</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14170" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14170" ref_url="https://www.suse.com/security/cve/CVE-2017-14170" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/mxfdec.c in FFmpeg 3.3.3 -&gt; 2.4, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted MXF file, which claims a large "nb_index_entries" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU resources, since there is no EOF check inside the loop. Moreover, this big loop can be invoked multiple times if there is more than one applicable data segment in the crafted MXF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14170/">CVE-2017-14170</cve>
	<bugzilla href="https://bugzilla.suse.com/1057537">SUSE bug 1057537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14171</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14171" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14171" ref_url="https://www.suse.com/security/cve/CVE-2017-14171" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted NSV file, which claims a large "table_entries_used" field in the header but does not contain sufficient backing data, is provided, the loop over 'table_entries_used' would consume huge CPU resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14171/">CVE-2017-14171</cve>
	<bugzilla href="https://bugzilla.suse.com/1057539">SUSE bug 1057539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14222</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14222" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14222" ref_url="https://www.suse.com/security/cve/CVE-2017-14222" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14222/">CVE-2017-14222</cve>
	<bugzilla href="https://bugzilla.suse.com/1058020">SUSE bug 1058020</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14223</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14223" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14223" ref_url="https://www.suse.com/security/cve/CVE-2017-14223" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14223/">CVE-2017-14223</cve>
	<bugzilla href="https://bugzilla.suse.com/1058019">SUSE bug 1058019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14225</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14225" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14225" ref_url="https://www.suse.com/security/cve/CVE-2017-14225" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2501-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00062.html" source="SUSE-SU"/>
    <description>
    The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodec_string function in libavcodec/utils.c, leading to a NULL pointer dereference. (It is also conceivable that there is security relevance for a NULL pointer dereference in av_color_primaries_name calls within the ffprobe command-line program.)
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14225/">CVE-2017-14225</cve>
	<bugzilla href="https://bugzilla.suse.com/1058018">SUSE bug 1058018</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14226</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14226" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14226" ref_url="https://www.suse.com/security/cve/CVE-2017-14226" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2931-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2943-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00009.html" source="SUSE-SU"/>
    <description>
    WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the WPXTableList class in WPXTable.cpp). This vulnerability can be triggered in LibreOffice before 5.3.7. It may lead to suffering a remote attack against a LibreOffice application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14226/">CVE-2017-14226</cve>
	<bugzilla href="https://bugzilla.suse.com/1058025">SUSE bug 1058025</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489168" comment="libwpd-0_10-10-0.10.2-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489169" comment="libwpd-devel-0.10.2-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14228</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14228" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14228" ref_url="https://www.suse.com/security/cve/CVE-2017-14228" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007088.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14228/">CVE-2017-14228</cve>
	<bugzilla href="https://bugzilla.suse.com/1058013">SUSE bug 1058013</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14245</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14245" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14245" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14245" ref_url="https://www.suse.com/security/cve/CVE-2017-14245" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0388-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00018.html" source="SUSE-SU"/>
    <description>
    An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14245/">CVE-2017-14245</cve>
	<bugzilla href="https://bugzilla.suse.com/1059912">SUSE bug 1059912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071777">SUSE bug 1071777</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481480" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14246</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14246" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14246" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14246" ref_url="https://www.suse.com/security/cve/CVE-2017-14246" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0388-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00018.html" source="SUSE-SU"/>
    <description>
    An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14246/">CVE-2017-14246</cve>
	<bugzilla href="https://bugzilla.suse.com/1059913">SUSE bug 1059913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071767">SUSE bug 1071767</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481480" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14248</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14248" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14248" ref_url="https://www.suse.com/security/cve/CVE-2017-14248" source="SUSE CVE"/>
    <description>
    A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14248/">CVE-2017-14248</cve>
	<bugzilla href="https://bugzilla.suse.com/1058220">SUSE bug 1058220</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14265</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14265" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14265" ref_url="https://www.suse.com/security/cve/CVE-2017-14265" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2638-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00007.html" source="SUSE-SU"/>
    <description>
    A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3. It could allow a remote denial of service or code execution attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14265/">CVE-2017-14265</cve>
	<bugzilla href="https://bugzilla.suse.com/1060163">SUSE bug 1060163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084688">SUSE bug 1084688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084690">SUSE bug 1084690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084691">SUSE bug 1084691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489076" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489077" comment="libraw16-0.18.9-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14316</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14316" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14316" ref_url="https://www.suse.com/security/cve/CVE-2017-14316" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2450-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2466-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-September/003223.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2611-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2514-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2540-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00078.html" source="SUSE-SU"/>
    <description>
    A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to specify the first NUMA node that should be used for allocations through the `memflags` parameter; the node is extracted using the `MEMF_get_node` macro. While the function checks to see if the special constant `NUMA_NO_NODE` is specified, it otherwise does not handle the case where `node &gt;= MAX_NUMNODES`. This allows an out-of-bounds access to an internal array.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14316/">CVE-2017-14316</cve>
	<bugzilla href="https://bugzilla.suse.com/1056278">SUSE bug 1056278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072198">SUSE bug 1072198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072223">SUSE bug 1072223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14324</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14324" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14324" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14324" ref_url="https://www.suse.com/security/cve/CVE-2017-14324" source="SUSE CVE"/>
    <description>
    In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14324/">CVE-2017-14324</cve>
	<bugzilla href="https://bugzilla.suse.com/1058453">SUSE bug 1058453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714333" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14333</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14333" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14333" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14333" ref_url="https://www.suse.com/security/cve/CVE-2017-14333" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during "readelf -a" execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14333/">CVE-2017-14333</cve>
	<bugzilla href="https://bugzilla.suse.com/1058480">SUSE bug 1058480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14348</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14348" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14348" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14348" ref_url="https://www.suse.com/security/cve/CVE-2017-14348" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2559-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-09/msg00099.html" source="SUSE-SU"/>
    <description>
    LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14348/">CVE-2017-14348</cve>
	<bugzilla href="https://bugzilla.suse.com/1058467">SUSE bug 1058467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063798">SUSE bug 1063798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489076" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489077" comment="libraw16-0.18.9-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14461</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14461" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14461" ref_url="https://www.suse.com/security/cve/CVE-2017-14461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/003969.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1134-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-05/msg00005.html" source="SUSE-SU"/>
    <description>
    A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14461/">CVE-2017-14461</cve>
	<bugzilla href="https://bugzilla.suse.com/1082826">SUSE bug 1082826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488315" comment="dovecot23-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488316" comment="dovecot23-backend-mysql-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488317" comment="dovecot23-backend-pgsql-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488318" comment="dovecot23-backend-sqlite-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488319" comment="dovecot23-devel-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488320" comment="dovecot23-fts-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488321" comment="dovecot23-fts-lucene-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488322" comment="dovecot23-fts-solr-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488323" comment="dovecot23-fts-squat-2.3.3-5.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14489</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14489" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14489" ref_url="https://www.suse.com/security/cve/CVE-2017-14489" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3165-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2739-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2741-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00019.html" source="SUSE-SU"/>
    <description>
    The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to cause a denial of service (panic) by leveraging incorrect length validation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14489/">CVE-2017-14489</cve>
	<bugzilla href="https://bugzilla.suse.com/1059051">SUSE bug 1059051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14491</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14491" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14491" ref_url="https://www.suse.com/security/cve/CVE-2017-14491" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14491/">CVE-2017-14491</cve>
	<bugzilla href="https://bugzilla.suse.com/1060354">SUSE bug 1060354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060360">SUSE bug 1060360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060361">SUSE bug 1060361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060362">SUSE bug 1060362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060364">SUSE bug 1060364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063832">SUSE bug 1063832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143944">SUSE bug 1143944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481098" comment="dnsmasq-2.78-5.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14492</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14492" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14492" ref_url="https://www.suse.com/security/cve/CVE-2017-14492" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14492/">CVE-2017-14492</cve>
	<bugzilla href="https://bugzilla.suse.com/1060355">SUSE bug 1060355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060360">SUSE bug 1060360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060361">SUSE bug 1060361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060362">SUSE bug 1060362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060364">SUSE bug 1060364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063832">SUSE bug 1063832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481098" comment="dnsmasq-2.78-5.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14493</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14493" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14493" ref_url="https://www.suse.com/security/cve/CVE-2017-14493" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14493/">CVE-2017-14493</cve>
	<bugzilla href="https://bugzilla.suse.com/1060360">SUSE bug 1060360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060361">SUSE bug 1060361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060362">SUSE bug 1060362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060364">SUSE bug 1060364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063832">SUSE bug 1063832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481098" comment="dnsmasq-2.78-5.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14494</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14494" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14494" ref_url="https://www.suse.com/security/cve/CVE-2017-14494" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-14494/">CVE-2017-14494</cve>
	<bugzilla href="https://bugzilla.suse.com/1060360">SUSE bug 1060360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060361">SUSE bug 1060361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060362">SUSE bug 1060362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060364">SUSE bug 1060364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481098" comment="dnsmasq-2.78-5.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14495</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14495" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14495" ref_url="https://www.suse.com/security/cve/CVE-2017-14495" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14495/">CVE-2017-14495</cve>
	<bugzilla href="https://bugzilla.suse.com/1060360">SUSE bug 1060360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060361">SUSE bug 1060361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060362">SUSE bug 1060362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060364">SUSE bug 1060364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481098" comment="dnsmasq-2.78-5.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14496</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14496" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14496" ref_url="https://www.suse.com/security/cve/CVE-2017-14496" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2617-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2618-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003270.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2619-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14496/">CVE-2017-14496</cve>
	<bugzilla href="https://bugzilla.suse.com/1060360">SUSE bug 1060360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060361">SUSE bug 1060361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060362">SUSE bug 1060362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060364">SUSE bug 1060364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481098" comment="dnsmasq-2.78-5.28 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14497</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14497" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14497" ref_url="https://www.suse.com/security/cve/CVE-2017-14497" source="SUSE CVE"/>
    <description>
    The tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of service (buffer overflow, and disk and memory corruption) or possibly have unspecified other impact via crafted system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14497/">CVE-2017-14497</cve>
	<bugzilla href="https://bugzilla.suse.com/1059058">SUSE bug 1059058</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14501</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14501" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14501" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14501" ref_url="https://www.suse.com/security/cve/CVE-2017-14501" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004813.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006201.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3717-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00017.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14501/">CVE-2017-14501</cve>
	<bugzilla href="https://bugzilla.suse.com/1059139">SUSE bug 1059139</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790343" comment="bsdtar-3.3.2-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631087" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631088" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631089" comment="libarchive13-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334041" comment="libarchive is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631087" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631088" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631089" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631090" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631091" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631092" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631093" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631094" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631095" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631096" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631097" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631098" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790342" comment="libarchive-devel-3.3.2-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009675173" comment="libarchive13-3.3.2-3.3.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14502</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14502" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14502" ref_url="https://www.suse.com/security/cve/CVE-2017-14502" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004813.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006201.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3717-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00017.html" source="SUSE-SU"/>
    <description>
    read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14502/">CVE-2017-14502</cve>
	<bugzilla href="https://bugzilla.suse.com/1059134">SUSE bug 1059134</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790343" comment="bsdtar-3.3.2-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631087" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631088" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631089" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631090" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631091" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631092" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631093" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631094" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631095" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631096" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631097" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631098" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790342" comment="libarchive-devel-3.3.2-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009675173" comment="libarchive13-3.3.2-3.3.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14503</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14503" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14503" ref_url="https://www.suse.com/security/cve/CVE-2017-14503" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004813.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004833.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3640-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004927.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14233-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006190.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3717-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00017.html" source="SUSE-SU"/>
    <description>
    libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14503/">CVE-2017-14503</cve>
	<bugzilla href="https://bugzilla.suse.com/1059100">SUSE bug 1059100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790343" comment="bsdtar-3.3.2-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631087" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631088" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631089" comment="libarchive13-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334041" comment="libarchive is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631087" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631088" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631089" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631090" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631091" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631092" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631093" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631094" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631095" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631096" comment="bsdtar-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631097" comment="libarchive-devel-3.3.3-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631098" comment="libarchive13-3.3.3-3.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790342" comment="libarchive-devel-3.3.2-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009675173" comment="libarchive13-3.3.2-3.3.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14517</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14517" ref_url="https://www.suse.com/security/cve/CVE-2017-14517" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004186.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1626-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006944.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1721-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00032.html" source="SUSE-SU"/>
    <description>
    In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef.cc via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14517/">CVE-2017-14517</cve>
	<bugzilla href="https://bugzilla.suse.com/1059066">SUSE bug 1059066</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14518</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14518" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14518" ref_url="https://www.suse.com/security/cve/CVE-2017-14518" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003384.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004186.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1721-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00032.html" source="SUSE-SU"/>
    <description>
    In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14518/">CVE-2017-14518</cve>
	<bugzilla href="https://bugzilla.suse.com/1059101">SUSE bug 1059101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14519</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14519" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14519" ref_url="https://www.suse.com/security/cve/CVE-2017-14519" source="SUSE CVE"/>
    <description>
    In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls (aka a Gfx.cc infinite loop).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14519/">CVE-2017-14519</cve>
	<bugzilla href="https://bugzilla.suse.com/1059152">SUSE bug 1059152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061091">SUSE bug 1061091</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334297" comment="poppler is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338790" comment="libpoppler-cpp0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337408" comment="libpoppler-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337409" comment="libpoppler-glib-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337738" comment="libpoppler-glib8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338791" comment="libpoppler73 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337407" comment="poppler-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338792" comment="typelib-1_0-Poppler-0_18 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14528</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14528" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14528" ref_url="https://www.suse.com/security/cve/CVE-2017-14528" source="SUSE CVE"/>
    <description>
    The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service (use-after-free after an invalid call to TIFFSetField, and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14528/">CVE-2017-14528</cve>
	<bugzilla href="https://bugzilla.suse.com/1059670">SUSE bug 1059670</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14529</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14529" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14529" ref_url="https://www.suse.com/security/cve/CVE-2017-14529" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PE file, related to the bfd_getl16 function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14529/">CVE-2017-14529</cve>
	<bugzilla href="https://bugzilla.suse.com/1059050">SUSE bug 1059050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14632</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14632" ref_url="https://www.suse.com/security/cve/CVE-2017-14632" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003568.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0047-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00015.html" source="SUSE-SU"/>
    <description>
    Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi-&gt;channels&lt;=0, a similar issue to Mozilla bug 550184.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14632/">CVE-2017-14632</cve>
	<bugzilla href="https://bugzilla.suse.com/1059809">SUSE bug 1059809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481532" comment="libvorbis-devel-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14633</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14633" ref_url="https://www.suse.com/security/cve/CVE-2017-14633" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003568.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0047-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00015.html" source="SUSE-SU"/>
    <description>
    In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-14633/">CVE-2017-14633</cve>
	<bugzilla href="https://bugzilla.suse.com/1059811">SUSE bug 1059811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081833">SUSE bug 1081833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481532" comment="libvorbis-devel-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14634</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14634" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14634" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14634" ref_url="https://www.suse.com/security/cve/CVE-2017-14634" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0388-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00018.html" source="SUSE-SU"/>
    <description>
    In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14634/">CVE-2017-14634</cve>
	<bugzilla href="https://bugzilla.suse.com/1059911">SUSE bug 1059911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481480" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14695</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14695" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14695" ref_url="https://www.suse.com/security/cve/CVE-2017-14695" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003542.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003543.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1757-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008281.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2822-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1053-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00061.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-14695/">CVE-2017-14695</cve>
	<bugzilla href="https://bugzilla.suse.com/1053955">SUSE bug 1053955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1062462">SUSE bug 1062462</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481641" comment="python3-salt-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481642" comment="salt-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481643" comment="salt-bash-completion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481644" comment="salt-doc-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481645" comment="salt-minion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481646" comment="salt-zsh-completion-2019.2.0-4.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488438" comment="salt-api-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488439" comment="salt-cloud-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488440" comment="salt-fish-completion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488441" comment="salt-master-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488442" comment="salt-proxy-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488443" comment="salt-ssh-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488444" comment="salt-syndic-2019.2.0-4.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14696</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14696" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14696" ref_url="https://www.suse.com/security/cve/CVE-2017-14696" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003542.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003543.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1757-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004864.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007157.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0315-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008281.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2822-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1053-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00061.html" source="SUSE-SU"/>
    <description>
    SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14696/">CVE-2017-14696</cve>
	<bugzilla href="https://bugzilla.suse.com/1053955">SUSE bug 1053955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1062464">SUSE bug 1062464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481641" comment="python3-salt-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481642" comment="salt-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481643" comment="salt-bash-completion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481644" comment="salt-doc-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481645" comment="salt-minion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481646" comment="salt-zsh-completion-2019.2.0-4.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488438" comment="salt-api-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488439" comment="salt-cloud-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488440" comment="salt-fish-completion-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488441" comment="salt-master-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488442" comment="salt-proxy-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488443" comment="salt-ssh-2019.2.0-4.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488444" comment="salt-syndic-2019.2.0-4.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14729</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14729" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14729" ref_url="https://www.suse.com/security/cve/CVE-2017-14729" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14729/">CVE-2017-14729</cve>
	<bugzilla href="https://bugzilla.suse.com/1060621">SUSE bug 1060621</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14745</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14745" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14745" ref_url="https://www.suse.com/security/cve/CVE-2017-14745" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14745/">CVE-2017-14745</cve>
	<bugzilla href="https://bugzilla.suse.com/1060599">SUSE bug 1060599</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14746</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14746" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14746" ref_url="https://www.suse.com/security/cve/CVE-2017-14746" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3104-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004410.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00095.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14746/">CVE-2017-14746</cve>
	<bugzilla href="https://bugzilla.suse.com/1060427">SUSE bug 1060427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069666">SUSE bug 1069666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14798</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14798" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14798" ref_url="https://www.suse.com/security/cve/CVE-2017-14798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html" source="SUSE-SU"/>
    <description>
    A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14798/">CVE-2017-14798</cve>
	<bugzilla href="https://bugzilla.suse.com/1062722">SUSE bug 1062722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480879" comment="postgresql-10-6.8 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488255" comment="postgresql-contrib-10-6.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488256" comment="postgresql-devel-10-6.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488257" comment="postgresql-docs-10-6.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488258" comment="postgresql-plperl-10-6.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488259" comment="postgresql-plpython-10-6.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488260" comment="postgresql-pltcl-10-6.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488261" comment="postgresql-server-10-6.8 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14804</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14804" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14804" ref_url="https://www.suse.com/security/cve/CVE-2017-14804" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3253-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005116.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:0232-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00053.html" source="SUSE-SU"/>
    <description>
    The build package before 20171128 did not check directory names during extraction of build results that allowed untrusted builds to write outside of the target system,allowing escape out of buildroots.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.9/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14804/">CVE-2017-14804</cve>
	<bugzilla href="https://bugzilla.suse.com/1069904">SUSE bug 1069904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341619" comment="build is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790344" comment="build-20190128-3.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790345" comment="build-mkbaselibs-20190128-3.3.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14858</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14858" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14858" ref_url="https://www.suse.com/security/cve/CVE-2017-14858" source="SUSE CVE"/>
    <description>
    There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14858/">CVE-2017-14858</cve>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009348242" comment="libexiv2-26 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335125" comment="libexiv2-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14859</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14859" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14859" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14859" ref_url="https://www.suse.com/security/cve/CVE-2017-14859" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14859/">CVE-2017-14859</cve>
	<bugzilla href="https://bugzilla.suse.com/1061000">SUSE bug 1061000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14860</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14860" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14860" ref_url="https://www.suse.com/security/cve/CVE-2017-14860" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14860/">CVE-2017-14860</cve>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333963" comment="exiv2 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009348242" comment="libexiv2-26 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335125" comment="libexiv2-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14862</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14862" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14862" ref_url="https://www.suse.com/security/cve/CVE-2017-14862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2818-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14862/">CVE-2017-14862</cve>
	<bugzilla href="https://bugzilla.suse.com/1060996">SUSE bug 1060996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14864</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14864" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14864" ref_url="https://www.suse.com/security/cve/CVE-2017-14864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004884.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3882-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004960.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1961-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00019.html" source="SUSE-SU"/>
    <description>
    An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14864/">CVE-2017-14864</cve>
	<bugzilla href="https://bugzilla.suse.com/1060995">SUSE bug 1060995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061025">SUSE bug 1061025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068871">SUSE bug 1068871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1080734">SUSE bug 1080734</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782684" comment="libexiv2-26-0.26-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782685" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14867</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14867" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14867" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14867" ref_url="https://www.suse.com/security/cve/CVE-2017-14867" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2717-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2747-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006709.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2614-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2757-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00025.html" source="SUSE-SU"/>
    <description>
    Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name. The vulnerable code is reachable via git-shell even without CVS support.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14867/">CVE-2017-14867</cve>
	<bugzilla href="https://bugzilla.suse.com/1060377">SUSE bug 1060377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060378">SUSE bug 1060378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061041">SUSE bug 1061041</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481138" comment="git-core-2.16.4-3.9.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487750" comment="git-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487751" comment="git-arch-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487752" comment="git-cvs-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487753" comment="git-daemon-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487754" comment="git-doc-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487755" comment="git-email-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487756" comment="git-gui-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487757" comment="git-svn-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487758" comment="git-web-2.16.4-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487759" comment="gitk-2.16.4-3.9.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14974</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14974" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14974" ref_url="https://www.suse.com/security/cve/CVE-2017-14974" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14974/">CVE-2017-14974</cve>
	<bugzilla href="https://bugzilla.suse.com/1061241">SUSE bug 1061241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14988</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14988" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14988" ref_url="https://www.suse.com/security/cve/CVE-2017-14988" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005757.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005771.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1954-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00063.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14988/">CVE-2017-14988</cve>
	<bugzilla href="https://bugzilla.suse.com/1061305">SUSE bug 1061305</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009494898" comment="libIlmImf-2_2-23-2.2.1-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009494899" comment="libIlmImfUtil-2_2-23-2.2.1-3.9.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009494900" comment="openexr-devel-2.2.1-3.9.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14992</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-14992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14992" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-14992" ref_url="https://www.suse.com/security/cve/CVE-2017-14992" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00012.html" source="SUSE-SU"/>
    <description>
    Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload, aka gzip bombing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14992/">CVE-2017-14992</cve>
	<bugzilla href="https://bugzilla.suse.com/1066210">SUSE bug 1066210</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488445" comment="skopeo-0.1.32-4.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15038</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15038" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15038" ref_url="https://www.suse.com/security/cve/CVE-2017-15038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15038/">CVE-2017-15038</cve>
	<bugzilla href="https://bugzilla.suse.com/1062069">SUSE bug 1062069</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15098</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15098" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15098" ref_url="https://www.suse.com/security/cve/CVE-2017-15098" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003547.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003595.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003597.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3425-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0095-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00042.html" source="SUSE-SU"/>
    <description>
    Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15098/">CVE-2017-15098</cve>
	<bugzilla href="https://bugzilla.suse.com/1067844">SUSE bug 1067844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185814">SUSE bug 1185814</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009339049" comment="postgresql10 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339050" comment="postgresql10-contrib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345841" comment="postgresql10-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339051" comment="postgresql10-docs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339052" comment="postgresql10-plperl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339053" comment="postgresql10-plpython is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339054" comment="postgresql10-pltcl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339055" comment="postgresql10-server is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345838" comment="libecpg6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345839" comment="libpq5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345840" comment="libpq5-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345842" comment="postgresql12 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345843" comment="postgresql12-contrib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345844" comment="postgresql12-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345845" comment="postgresql12-docs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345846" comment="postgresql12-plperl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345847" comment="postgresql12-plpython is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345848" comment="postgresql12-pltcl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345849" comment="postgresql12-server is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009345850" comment="postgresql12-server-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481472" comment="libpq5-10.6-6.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481473" comment="postgresql10-10.6-6.26 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488348" comment="libecpg6-10.6-6.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488349" comment="postgresql10-contrib-10.6-6.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488350" comment="postgresql10-devel-10.6-6.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488351" comment="postgresql10-docs-10.6-6.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488352" comment="postgresql10-plperl-10.6-6.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488353" comment="postgresql10-plpython-10.6-6.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488354" comment="postgresql10-pltcl-10.6-6.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488355" comment="postgresql10-server-10.6-6.26 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15099</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15099" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15099" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15099" ref_url="https://www.suse.com/security/cve/CVE-2017-15099" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003547.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3425-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0529-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00042.html" source="SUSE-SU"/>
    <description>
    INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15099/">CVE-2017-15099</cve>
	<bugzilla href="https://bugzilla.suse.com/1067841">SUSE bug 1067841</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334083" comment="postgresql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336201" comment="postgresql-contrib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335927" comment="postgresql-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336202" comment="postgresql-docs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336203" comment="postgresql-plperl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336204" comment="postgresql-plpython is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336205" comment="postgresql-pltcl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336206" comment="postgresql-server is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336207" comment="postgresql-server-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481472" comment="libpq5-10.6-6.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481473" comment="postgresql10-10.6-6.26 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488348" comment="libecpg6-10.6-6.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488349" comment="postgresql10-contrib-10.6-6.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488350" comment="postgresql10-devel-10.6-6.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488351" comment="postgresql10-docs-10.6-6.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488352" comment="postgresql10-plperl-10.6-6.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488353" comment="postgresql10-plpython-10.6-6.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488354" comment="postgresql10-pltcl-10.6-6.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488355" comment="postgresql10-server-10.6-6.26 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15102</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15102" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15102" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15102" ref_url="https://www.suse.com/security/cve/CVE-2017-15102" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
    <description>
    The tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users (who are physically proximate for inserting a crafted USB device) to gain privileges by leveraging a write-what-where condition that occurs after a race condition and a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15102/">CVE-2017-15102</cve>
	<bugzilla href="https://bugzilla.suse.com/1066705">SUSE bug 1066705</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15105</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15105" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15105" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15105" ref_url="https://www.suse.com/security/cve/CVE-2017-15105" source="SUSE CVE"/>
    <description>
    A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15105/">CVE-2017-15105</cve>
	<bugzilla href="https://bugzilla.suse.com/1076963">SUSE bug 1076963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481525" comment="libunbound2-1.6.8-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481526" comment="unbound-anchor-1.6.8-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481527" comment="unbound-devel-1.6.8-8.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15107</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15107" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15107" ref_url="https://www.suse.com/security/cve/CVE-2017-15107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006208.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-12/msg00027.html" source="SUSE-SU"/>
    <description>
    A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15107/">CVE-2017-15107</cve>
	<bugzilla href="https://bugzilla.suse.com/1076958">SUSE bug 1076958</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491770" comment="dnsmasq-2.78-7.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15108</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15108" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15108" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15108" ref_url="https://www.suse.com/security/cve/CVE-2017-15108" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003708.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00028.html" source="SUSE-SU"/>
    <description>
    spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15108/">CVE-2017-15108</cve>
	<bugzilla href="https://bugzilla.suse.com/1070724">SUSE bug 1070724</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486547" comment="spice-vdagent-0.17.0-2.39 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15115</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15115" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15115" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15115" ref_url="https://www.suse.com/security/cve/CVE-2017-15115" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15115/">CVE-2017-15115</cve>
	<bugzilla href="https://bugzilla.suse.com/1068671">SUSE bug 1068671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15116</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15116" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15116" ref_url="https://www.suse.com/security/cve/CVE-2017-15116" source="SUSE CVE"/>
    <description>
    The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15116/">CVE-2017-15116</cve>
	<bugzilla href="https://bugzilla.suse.com/1070613">SUSE bug 1070613</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15118</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15118" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15118" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15118" ref_url="https://www.suse.com/security/cve/CVE-2017-15118" source="SUSE CVE"/>
    <description>
    A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15118/">CVE-2017-15118</cve>
	<bugzilla href="https://bugzilla.suse.com/1070147">SUSE bug 1070147</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15119</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15119" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15119" ref_url="https://www.suse.com/security/cve/CVE-2017-15119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00053.html" source="SUSE-SU"/>
    <description>
    The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15119/">CVE-2017-15119</cve>
	<bugzilla href="https://bugzilla.suse.com/1070144">SUSE bug 1070144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15127</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15127" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15127" ref_url="https://www.suse.com/security/cve/CVE-2017-15127" source="SUSE CVE"/>
    <description>
    A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local denial of service (BUG).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15127/">CVE-2017-15127</cve>
	<bugzilla href="https://bugzilla.suse.com/1073113">SUSE bug 1073113</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15128</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15128" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15128" ref_url="https://www.suse.com/security/cve/CVE-2017-15128" source="SUSE CVE"/>
    <description>
    A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15128/">CVE-2017-15128</cve>
	<bugzilla href="https://bugzilla.suse.com/1073112">SUSE bug 1073112</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15129</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15129" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15129" ref_url="https://www.suse.com/security/cve/CVE-2017-15129" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-15129/">CVE-2017-15129</cve>
	<bugzilla href="https://bugzilla.suse.com/1074839">SUSE bug 1074839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15130</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15130" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15130" ref_url="https://www.suse.com/security/cve/CVE-2017-15130" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2632-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004536.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2632-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004697.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2642-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00012.html" source="SUSE-SU"/>
    <description>
    A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could exploit TLS SNI configuration lookups, leading to excessive memory usage and the process to restart.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15130/">CVE-2017-15130</cve>
	<bugzilla href="https://bugzilla.suse.com/1082828">SUSE bug 1082828</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488315" comment="dovecot23-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488316" comment="dovecot23-backend-mysql-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488317" comment="dovecot23-backend-pgsql-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488318" comment="dovecot23-backend-sqlite-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488319" comment="dovecot23-devel-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488320" comment="dovecot23-fts-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488321" comment="dovecot23-fts-lucene-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488322" comment="dovecot23-fts-solr-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488323" comment="dovecot23-fts-squat-2.3.3-5.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15132</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15132" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15132" ref_url="https://www.suse.com/security/cve/CVE-2017-15132" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0466-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003739.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00076.html" source="SUSE-SU"/>
    <description>
    A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processes. The leak has impact in high performance configuration where same login processes are reused and can cause the process to crash due to memory exhaustion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15132/">CVE-2017-15132</cve>
	<bugzilla href="https://bugzilla.suse.com/1075608">SUSE bug 1075608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488315" comment="dovecot23-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488316" comment="dovecot23-backend-mysql-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488317" comment="dovecot23-backend-pgsql-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488318" comment="dovecot23-backend-sqlite-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488319" comment="dovecot23-devel-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488320" comment="dovecot23-fts-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488321" comment="dovecot23-fts-lucene-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488322" comment="dovecot23-fts-solr-2.3.3-5.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488323" comment="dovecot23-fts-squat-2.3.3-5.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15134</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15134" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15134" ref_url="https://www.suse.com/security/cve/CVE-2017-15134" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005641.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1397-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html" source="SUSE-SU"/>
    <description>
    A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-03"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15134/">CVE-2017-15134</cve>
	<bugzilla href="https://bugzilla.suse.com/1007004">SUSE bug 1007004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076530">SUSE bug 1076530</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009498716" comment="389-ds-1.4.0.3-4.7.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498717" comment="389-ds-devel-1.4.0.3-4.7.52 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15135</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15135" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15135" ref_url="https://www.suse.com/security/cve/CVE-2017-15135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005444.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005641.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1397-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html" source="SUSE-SU"/>
    <description>
    It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15135/">CVE-2017-15135</cve>
	<bugzilla href="https://bugzilla.suse.com/1007004">SUSE bug 1007004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076530">SUSE bug 1076530</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009498716" comment="389-ds-1.4.0.3-4.7.52 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498717" comment="389-ds-devel-1.4.0.3-4.7.52 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15186</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15186" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15186" ref_url="https://www.suse.com/security/cve/CVE-2017-15186" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0470-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0476-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00062.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15186/">CVE-2017-15186</cve>
	<bugzilla href="https://bugzilla.suse.com/1064577">SUSE bug 1064577</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15189</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15189" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15189" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15189" ref_url="https://www.suse.com/security/cve/CVE-2017-15189" source="SUSE CVE"/>
    <description>
    In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by adding decrements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15189/">CVE-2017-15189</cve>
	<bugzilla href="https://bugzilla.suse.com/1062645">SUSE bug 1062645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15190</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15190" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15190" ref_url="https://www.suse.com/security/cve/CVE-2017-15190" source="SUSE CVE"/>
    <description>
    In Wireshark 2.4.0 to 2.4.1, the RTSP dissector could crash. This was addressed in epan/dissectors/packet-rtsp.c by correcting the scope of a variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15190/">CVE-2017-15190</cve>
	<bugzilla href="https://bugzilla.suse.com/1062645">SUSE bug 1062645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15191</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15191" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15191" ref_url="https://www.suse.com/security/cve/CVE-2017-15191" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003581.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2730-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00045.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15191/">CVE-2017-15191</cve>
	<bugzilla href="https://bugzilla.suse.com/1062645">SUSE bug 1062645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15192</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15192" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15192" ref_url="https://www.suse.com/security/cve/CVE-2017-15192" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003581.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2730-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00045.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by considering a case where not all of the BTATT packets have the same encapsulation level.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15192/">CVE-2017-15192</cve>
	<bugzilla href="https://bugzilla.suse.com/1062645">SUSE bug 1062645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15193</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15193" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15193" ref_url="https://www.suse.com/security/cve/CVE-2017-15193" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003358.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003581.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2730-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00045.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-mbim.c by changing the memory-allocation approach.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15193/">CVE-2017-15193</cve>
	<bugzilla href="https://bugzilla.suse.com/1062645">SUSE bug 1062645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983671">SUSE bug 983671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15232</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15232" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15232" ref_url="https://www.suse.com/security/cve/CVE-2017-15232" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004223.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2899-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00115.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0393-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00023.html" source="SUSE-SU"/>
    <description>
    libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15232/">CVE-2017-15232</cve>
	<bugzilla href="https://bugzilla.suse.com/1062937">SUSE bug 1062937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486681" comment="libjpeg8-32bit-8.1.2-5.7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481410" comment="libjpeg62-62.2.0-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481411" comment="libjpeg62-devel-62.2.0-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481412" comment="libjpeg8-8.1.2-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481413" comment="libjpeg8-devel-8.1.2-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481414" comment="libturbojpeg0-8.1.2-5.7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15265</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15265" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15265" ref_url="https://www.suse.com/security/cve/CVE-2017-15265" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3165-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2846-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00085.html" source="SUSE-SU"/>
    <description>
    Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15265/">CVE-2017-15265</cve>
	<bugzilla href="https://bugzilla.suse.com/1062520">SUSE bug 1062520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15268</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15268" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15268" ref_url="https://www.suse.com/security/cve/CVE-2017-15268" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
    <description>
    Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15268/">CVE-2017-15268</cve>
	<bugzilla href="https://bugzilla.suse.com/1062942">SUSE bug 1062942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15274</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15274" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15274" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15274" ref_url="https://www.suse.com/security/cve/CVE-2017-15274" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2769-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2770-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2772-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2775-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2776-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2777-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2779-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2782-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2783-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2784-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2787-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2790-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2791-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2792-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2793-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2796-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2801-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3165-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
    <description>
    security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15274/">CVE-2017-15274</cve>
	<bugzilla href="https://bugzilla.suse.com/1045327">SUSE bug 1045327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1062471">SUSE bug 1062471</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15275</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15275" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15275" ref_url="https://www.suse.com/security/cve/CVE-2017-15275" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3104-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003453.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004410.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00095.html" source="SUSE-SU"/>
    <description>
    Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15275/">CVE-2017-15275</cve>
	<bugzilla href="https://bugzilla.suse.com/1063008">SUSE bug 1063008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069666">SUSE bug 1069666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15286</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15286" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15286" ref_url="https://www.suse.com/security/cve/CVE-2017-15286" source="SUSE CVE"/>
    <description>
    SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15286/">CVE-2017-15286</cve>
	<bugzilla href="https://bugzilla.suse.com/1063145">SUSE bug 1063145</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335190" comment="libsqlite3-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335191" comment="libsqlite3-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333983" comment="sqlite3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335192" comment="sqlite3-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15289</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15289" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15289" ref_url="https://www.suse.com/security/cve/CVE-2017-15289" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2936-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3178-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3212-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2938-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3193-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3194-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00004.html" source="SUSE-SU"/>
    <description>
    The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15289/">CVE-2017-15289</cve>
	<bugzilla href="https://bugzilla.suse.com/1063122">SUSE bug 1063122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063123">SUSE bug 1063123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15298</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15298" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15298" ref_url="https://www.suse.com/security/cve/CVE-2017-15298" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html" source="SUSE-SU"/>
    <description>
    Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memory consumption) via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to build the data structure in memory before writing to disk.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15298/">CVE-2017-15298</cve>
	<bugzilla href="https://bugzilla.suse.com/1063412">SUSE bug 1063412</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491911" comment="git-core-2.26.1-3.25.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009496250" comment="git-2.26.1-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496251" comment="git-arch-2.26.1-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496252" comment="git-cvs-2.26.1-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496253" comment="git-daemon-2.26.1-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496254" comment="git-doc-2.26.1-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496255" comment="git-email-2.26.1-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496256" comment="git-gui-2.26.1-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496257" comment="git-svn-2.26.1-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496258" comment="git-web-2.26.1-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496259" comment="gitk-2.26.1-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15365</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15365" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15365" ref_url="https://www.suse.com/security/cve/CVE-2017-15365" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005536.html" source="SUSE-SU"/>
    <description>
    sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass intended access restrictions and replicate data definition language (DDL) statements to cluster nodes by leveraging incorrect ordering of DDL replication and ACL checking.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15365/">CVE-2017-15365</cve>
	<bugzilla href="https://bugzilla.suse.com/1072167">SUSE bug 1072167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15537</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15537" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15537" ref_url="https://www.suse.com/security/cve/CVE-2017-15537" source="SUSE CVE"/>
    <description>
    The x86/fpu (Floating Point Unit) subsystem in the Linux kernel before 4.13.5, when a processor supports the xsave feature but not the xsaves feature, does not correctly handle attempts to set reserved bits in the xstate header via the ptrace() or rt_sigreturn() system call, allowing local users to read the FPU registers of other processes on the system, related to arch/x86/kernel/fpu/regset.c and arch/x86/kernel/fpu/signal.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15537/">CVE-2017-15537</cve>
	<bugzilla href="https://bugzilla.suse.com/1063984">SUSE bug 1063984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15566</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15566" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15566" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15566" ref_url="https://www.suse.com/security/cve/CVE-2017-15566" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006511.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006517.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2607-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008484.html" source="SUSE-SU"/>
    <description>
    Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15566/">CVE-2017-15566</cve>
	<bugzilla href="https://bugzilla.suse.com/1065697">SUSE bug 1065697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009496739" comment="pdsh-2.33-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496740" comment="pdsh-dshgroup-2.33-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496741" comment="pdsh-genders-2.33-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496742" comment="pdsh-machines-2.33-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496743" comment="pdsh-netgroup-2.33-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496744" comment="pdsh-slurm-2.33-7.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496745" comment="pdsh-slurm_18_08-2.33-7.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009727032" comment="libnss_slurm2_20_11 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727033" comment="libpmi0_20_11 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727034" comment="libslurm36 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727035" comment="perl-slurm_20_11 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694543" comment="slurm_20_11 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727036" comment="slurm_20_11-auth-none is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727037" comment="slurm_20_11-config is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727038" comment="slurm_20_11-config-man is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727039" comment="slurm_20_11-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727040" comment="slurm_20_11-doc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727041" comment="slurm_20_11-lua is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727042" comment="slurm_20_11-munge is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727043" comment="slurm_20_11-node is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727044" comment="slurm_20_11-pam_slurm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727045" comment="slurm_20_11-plugins is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727046" comment="slurm_20_11-slurmdbd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727047" comment="slurm_20_11-sql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727048" comment="slurm_20_11-sview is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727049" comment="slurm_20_11-torque is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727050" comment="slurm_20_11-webdoc is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15631</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15631" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15631" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15631" ref_url="https://www.suse.com/security/cve/CVE-2017-15631" source="SUSE CVE"/>
    <description>
    TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-workmode variable in the pptp_client.lua file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15631/">CVE-2017-15631</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481682" comment="yubikey-manager-2.1.0-1.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15649</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15649" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15649" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15649" ref_url="https://www.suse.com/security/cve/CVE-2017-15649" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2869-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3072-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3076-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3103-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3116-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3117-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3118-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3120-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3121-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3123-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3124-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3125-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3127-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3129-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3132-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3136-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3145-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3146-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3150-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3151-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3156-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00077.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3158-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00079.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3159-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3160-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3307-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3315-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0233-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0562-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0664-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2846-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2905-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00085.html" source="SUSE-SU"/>
    <description>
    net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures, because of a race condition (involving fanout_add and packet_do_bind) that leads to a use-after-free, a different vulnerability than CVE-2017-6346.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15649/">CVE-2017-15649</cve>
	<bugzilla href="https://bugzilla.suse.com/1064388">SUSE bug 1064388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064392">SUSE bug 1064392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15652</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15652" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15652" ref_url="https://www.suse.com/security/cve/CVE-2017-15652" source="SUSE CVE"/>
    <description>
    Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga (imagemagick used that). The attack vector is: Someone must open a postscript file though ghostscript. Because of imagemagick also use libga, so it was affected as well.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15652/">CVE-2017-15652</cve>
	<bugzilla href="https://bugzilla.suse.com/1136756">SUSE bug 1136756</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334003" comment="ghostscript is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335323" comment="ghostscript-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335322" comment="ghostscript-x11 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15670</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15670" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15670" ref_url="https://www.suse.com/security/cve/CVE-2017-15670" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004606.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
    <description>
    The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15670/">CVE-2017-15670</cve>
	<bugzilla href="https://bugzilla.suse.com/1064583">SUSE bug 1064583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110160">SUSE bug 1110160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15671</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15671" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15671" ref_url="https://www.suse.com/security/cve/CVE-2017-15671" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004949.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
    <description>
    The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15671/">CVE-2017-15671</cve>
	<bugzilla href="https://bugzilla.suse.com/1064569">SUSE bug 1064569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15672</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15672" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15672" ref_url="https://www.suse.com/security/cve/CVE-2017-15672" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0470-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0476-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00062.html" source="SUSE-SU"/>
    <description>
    The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15672/">CVE-2017-15672</cve>
	<bugzilla href="https://bugzilla.suse.com/1066428">SUSE bug 1066428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15698</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15698" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15698" ref_url="https://www.suse.com/security/cve/CVE-2017-15698" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005314.html" source="SUSE-SU"/>
    <description>
    When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-06-28"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-15698/">CVE-2017-15698</cve>
	<bugzilla href="https://bugzilla.suse.com/1078679">SUSE bug 1078679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009769795" comment="libtcnative-1-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009769796" comment="libtcnative-1-0-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15705</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15705" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15705" ref_url="https://www.suse.com/security/cve/CVE-2017-15705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005748.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2011-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192011-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html" source="SUSE-SU"/>
    <description>
    A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain unclosed tags in emails that cause markup to be handled incorrectly leading to scan timeouts. In Apache SpamAssassin, using HTML::Parser, we setup an object and hook into the begin and end tag event handlers In both cases, the "open" event is immediately followed by a "close" event - even if the tag *does not* close in the HTML being parsed. Because of this, we are missing the "text" event to deal with the object normally. This can cause carefully crafted emails that might take more scan time than expected leading to a Denial of Service. The issue is possibly a bug or design decision in HTML::Parser that specifically impacts the way Apache SpamAssassin uses the module with poorly formed html. The exploit has been seen in the wild but not believed to have been purposefully part of a Denial of Service attempt. We are concerned that there may be attempts to abuse the vulnerability in the future.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15705/">CVE-2017-15705</cve>
	<bugzilla href="https://bugzilla.suse.com/1108745">SUSE bug 1108745</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487779" comment="perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-10.19 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481621" comment="perl-Mail-SpamAssassin-3.4.2-10.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481622" comment="spamassassin-3.4.2-10.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15804</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15804" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15804" ref_url="https://www.suse.com/security/cve/CVE-2017-15804" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004606.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
    <description>
    The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15804/">CVE-2017-15804</cve>
	<bugzilla href="https://bugzilla.suse.com/1064580">SUSE bug 1064580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110160">SUSE bug 1110160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123874">SUSE bug 1123874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15868</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15868" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15868" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15868" ref_url="https://www.suse.com/security/cve/CVE-2017-15868" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0252-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0253-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0267-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0276-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00091.html" source="SUSE-SU"/>
    <description>
    The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local users to gain privileges via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15868/">CVE-2017-15868</cve>
	<bugzilla href="https://bugzilla.suse.com/1071470">SUSE bug 1071470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071471">SUSE bug 1071471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715873" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15873</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15873" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15873" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15873" ref_url="https://www.suse.com/security/cve/CVE-2017-15873" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15873/">CVE-2017-15873</cve>
	<bugzilla href="https://bugzilla.suse.com/1064976">SUSE bug 1064976</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663736" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663741" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663750" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663751" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663766" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663767" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715874" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15874</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15874" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15874" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15874" ref_url="https://www.suse.com/security/cve/CVE-2017-15874" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15874/">CVE-2017-15874</cve>
	<bugzilla href="https://bugzilla.suse.com/1064978">SUSE bug 1064978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663736" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663741" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663750" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663751" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663766" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663767" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15908</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15908" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15908" ref_url="https://www.suse.com/security/cve/CVE-2017-15908" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003686.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0320-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00118.html" source="SUSE-SU"/>
    <description>
    In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15908/">CVE-2017-15908</cve>
	<bugzilla href="https://bugzilla.suse.com/1065276">SUSE bug 1065276</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481501" comment="libsystemd0-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481502" comment="libsystemd0-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481503" comment="libudev-devel-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481504" comment="libudev1-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481505" comment="libudev1-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481506" comment="systemd-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481507" comment="systemd-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481508" comment="systemd-bash-completion-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481509" comment="systemd-container-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481510" comment="systemd-coredump-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481511" comment="systemd-devel-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481512" comment="systemd-sysvinit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481513" comment="udev-234-24.25.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15938</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15938" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15938" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15938" ref_url="https://www.suse.com/security/cve/CVE-2017-15938" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service (find_abstract_instance_name invalid memory read, segmentation fault, and application crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15938/">CVE-2017-15938</cve>
	<bugzilla href="https://bugzilla.suse.com/1065693">SUSE bug 1065693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15939</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15939" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15939" ref_url="https://www.suse.com/security/cve/CVE-2017-15939" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. NOTE: this issue is caused by an incomplete fix for CVE-2017-15023.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15939/">CVE-2017-15939</cve>
	<bugzilla href="https://bugzilla.suse.com/1061623">SUSE bug 1061623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065689">SUSE bug 1065689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15951</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15951" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15951" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15951" ref_url="https://www.suse.com/security/cve/CVE-2017-15951" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00054.html" source="SUSE-SU"/>
    <description>
    The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the "negative" state to avoid a race condition, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15951/">CVE-2017-15951</cve>
	<bugzilla href="https://bugzilla.suse.com/1062840">SUSE bug 1062840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065615">SUSE bug 1065615</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15996</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-15996" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15996" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-15996" ref_url="https://www.suse.com/security/cve/CVE-2017-15996" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a "buffer overflow on fuzzed archive header," related to an uninitialized variable, an improper conditional jump, and the get_archive_member_name, process_archive_index_and_symbols, and setup_archive functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15996/">CVE-2017-15996</cve>
	<bugzilla href="https://bugzilla.suse.com/1065643">SUSE bug 1065643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16011</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16011" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16011" ref_url="https://www.suse.com/security/cve/CVE-2017-16011" source="SUSE CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6708.  Reason: This candidate is a duplicate of CVE-2012-6708.  Notes: All CVE users should reference CVE-2012-6708 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-16011/">CVE-2017-16011</cve>
	<bugzilla href="https://bugzilla.suse.com/1111661">SUSE bug 1111661</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716227" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16227</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16227" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16227" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16227" ref_url="https://www.suse.com/security/cve/CVE-2017-16227" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0456-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0457-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service (session drop) via BGP UPDATE messages, because AS_PATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16227/">CVE-2017-16227</cve>
	<bugzilla href="https://bugzilla.suse.com/1065641">SUSE bug 1065641</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488182" comment="libfpm_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488183" comment="libospf0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488184" comment="libospfapiclient0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488185" comment="libquagga_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488186" comment="libzebra1-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488187" comment="quagga-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488188" comment="quagga-devel-1.1.1-2.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16232</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16232" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16232" ref_url="https://www.suse.com/security/cve/CVE-2017-16232" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0073-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16232/">CVE-2017-16232</cve>
	<bugzilla href="https://bugzilla.suse.com/1069213">SUSE bug 1069213</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16340</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16340" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16340" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16340" ref_url="https://www.suse.com/security/cve/CVE-2017-16340" source="SUSE CVE"/>
    <description>
    An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c0e8 the value for the s_dport key is copied using strcpy to the buffer at 0xa000180c. This buffer is 6 bytes large, sending anything longer will cause a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-08"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-16340/">CVE-2017-16340</cve>
	<bugzilla href="https://bugzilla.suse.com/1102922">SUSE bug 1102922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103032">SUSE bug 1103032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103040">SUSE bug 1103040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334550" comment="libmspack is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336180" comment="libmspack-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336060" comment="libmspack0 is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16525</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16525" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16525" ref_url="https://www.suse.com/security/cve/CVE-2017-16525" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011540.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011611.html" source="SUSE-SU"/>
    <description>
    The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16525/">CVE-2017-16525</cve>
	<bugzilla href="https://bugzilla.suse.com/1066618">SUSE bug 1066618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16527</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16527" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16527" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16527" ref_url="https://www.suse.com/security/cve/CVE-2017-16527" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
    <description>
    sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (snd_usb_mixer_interrupt use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16527/">CVE-2017-16527</cve>
	<bugzilla href="https://bugzilla.suse.com/1066625">SUSE bug 1066625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16528</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16528" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16528" ref_url="https://www.suse.com/security/cve/CVE-2017-16528" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    sound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service (snd_rawmidi_dev_seq_free use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16528/">CVE-2017-16528</cve>
	<bugzilla href="https://bugzilla.suse.com/1066629">SUSE bug 1066629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16529</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16529" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16529" ref_url="https://www.suse.com/security/cve/CVE-2017-16529" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
    <description>
    The snd_usb_create_streams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16529/">CVE-2017-16529</cve>
	<bugzilla href="https://bugzilla.suse.com/1066650">SUSE bug 1066650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16530</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16530" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16530" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16530" ref_url="https://www.suse.com/security/cve/CVE-2017-16530" source="SUSE CVE"/>
    <description>
    The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device, related to drivers/usb/storage/uas-detect.h and drivers/usb/storage/uas.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16530/">CVE-2017-16530</cve>
	<bugzilla href="https://bugzilla.suse.com/1066668">SUSE bug 1066668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16531</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16531" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16531" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16531" ref_url="https://www.suse.com/security/cve/CVE-2017-16531" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
    <description>
    drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device, related to the USB_DT_INTERFACE_ASSOCIATION descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16531/">CVE-2017-16531</cve>
	<bugzilla href="https://bugzilla.suse.com/1066671">SUSE bug 1066671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16532</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16532" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16532" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16532" ref_url="https://www.suse.com/security/cve/CVE-2017-16532" source="SUSE CVE"/>
    <description>
    The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16532/">CVE-2017-16532</cve>
	<bugzilla href="https://bugzilla.suse.com/1066673">SUSE bug 1066673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16533</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16533" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16533" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16533" ref_url="https://www.suse.com/security/cve/CVE-2017-16533" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004818.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004878.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004905.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4072-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005067.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16533/">CVE-2017-16533</cve>
	<bugzilla href="https://bugzilla.suse.com/1066674">SUSE bug 1066674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16534</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16534" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16534" ref_url="https://www.suse.com/security/cve/CVE-2017-16534" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
    <description>
    The cdc_parse_cdc_header function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16534/">CVE-2017-16534</cve>
	<bugzilla href="https://bugzilla.suse.com/1066693">SUSE bug 1066693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16535</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16535" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16535" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16535" ref_url="https://www.suse.com/security/cve/CVE-2017-16535" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
    <description>
    The usb_get_bos_descriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16535/">CVE-2017-16535</cve>
	<bugzilla href="https://bugzilla.suse.com/1066700">SUSE bug 1066700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16536</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16536" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16536" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16536" ref_url="https://www.suse.com/security/cve/CVE-2017-16536" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16536/">CVE-2017-16536</cve>
	<bugzilla href="https://bugzilla.suse.com/1066606">SUSE bug 1066606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16537</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16537" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16537" ref_url="https://www.suse.com/security/cve/CVE-2017-16537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    The imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16537/">CVE-2017-16537</cve>
	<bugzilla href="https://bugzilla.suse.com/1066573">SUSE bug 1066573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16538</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16538" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16538" ref_url="https://www.suse.com/security/cve/CVE-2017-16538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
    <description>
    drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device, related to a missing warm-start check and incorrect attach timing (dm04_lme2510_frontend_attach versus dm04_lme2510_tuner).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16538/">CVE-2017-16538</cve>
	<bugzilla href="https://bugzilla.suse.com/1066569">SUSE bug 1066569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16539</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16539" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16539" ref_url="https://www.suse.com/security/cve/CVE-2017-16539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0406-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00012.html" source="SUSE-SU"/>
    <description>
    The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain older Linux kernels are used) by leveraging Docker container access to write a "scsi remove-single-device" line to /proc/scsi/scsi, aka SCSI MICDROP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-16539/">CVE-2017-16539</cve>
	<bugzilla href="https://bugzilla.suse.com/1066801">SUSE bug 1066801</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482588" comment="docker-18.09.1_ce-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482589" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16541</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16541" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16541" ref_url="https://www.suse.com/security/cve/CVE-2017-16541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004610.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004744.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3591-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004918.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16541/">CVE-2017-16541</cve>
	<bugzilla href="https://bugzilla.suse.com/1066489">SUSE bug 1066489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107343">SUSE bug 1107343</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790346" comment="MozillaFirefox-60.2.0-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790347" comment="MozillaFirefox-branding-SLE-60-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790348" comment="MozillaFirefox-devel-60.2.0-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790349" comment="MozillaFirefox-translations-common-60.2.0-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790350" comment="MozillaFirefox-translations-other-60.2.0-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790351" comment="MozillaThunderbird-60.2.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790352" comment="MozillaThunderbird-translations-common-60.2.1-3.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790353" comment="MozillaThunderbird-translations-other-60.2.1-3.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16544</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16544" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16544" ref_url="https://www.suse.com/security/cve/CVE-2017-16544" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16544/">CVE-2017-16544</cve>
	<bugzilla href="https://bugzilla.suse.com/1069412">SUSE bug 1069412</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663736" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663741" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663750" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663751" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009663766" comment="busybox-1.34.1-4.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009663767" comment="busybox-static-1.34.1-4.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16548</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16548" ref_url="https://www.suse.com/security/cve/CVE-2017-16548" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003603.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003604.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00044.html" source="SUSE-SU"/>
    <description>
    The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data to the daemon.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16548/">CVE-2017-16548</cve>
	<bugzilla href="https://bugzilla.suse.com/1066644">SUSE bug 1066644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480919" comment="rsync-3.1.3-2.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16611</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16611" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16611" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16611" ref_url="https://www.suse.com/security/cve/CVE-2017-16611" source="SUSE CVE"/>
    <description>
    In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16611/">CVE-2017-16611</cve>
	<bugzilla href="https://bugzilla.suse.com/1050459">SUSE bug 1050459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480420" comment="libXfont-devel-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480422" comment="libXfont2-2-2.0.3-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480423" comment="libXfont2-devel-2.0.3-1.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716612" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16612</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16612" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16612" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16612" ref_url="https://www.suse.com/security/cve/CVE-2017-16612" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003648.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0504-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00087.html" source="SUSE-SU"/>
    <description>
    libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector exists against the related code in cursor/xcursor.c in Wayland through 1.14.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16612/">CVE-2017-16612</cve>
	<bugzilla href="https://bugzilla.suse.com/1065386">SUSE bug 1065386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159415">SUSE bug 1159415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482753" comment="libXcursor1-32bit-1.1.15-1.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480410" comment="libXcursor-devel-1.1.15-1.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480411" comment="libXcursor1-1.1.15-1.18 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16643</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16643" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16643" ref_url="https://www.suse.com/security/cve/CVE-2017-16643" source="SUSE CVE"/>
    <description>
    The parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16643/">CVE-2017-16643</cve>
	<bugzilla href="https://bugzilla.suse.com/1067115">SUSE bug 1067115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16644</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16644" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16644" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16644" ref_url="https://www.suse.com/security/cve/CVE-2017-16644" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00054.html" source="SUSE-SU"/>
    <description>
    The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (improper error handling and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16644/">CVE-2017-16644</cve>
	<bugzilla href="https://bugzilla.suse.com/1067118">SUSE bug 1067118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16645</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16645" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16645" ref_url="https://www.suse.com/security/cve/CVE-2017-16645" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (ims_pcu_parse_cdc_data out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16645/">CVE-2017-16645</cve>
	<bugzilla href="https://bugzilla.suse.com/1067132">SUSE bug 1067132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16646</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16646" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16646" ref_url="https://www.suse.com/security/cve/CVE-2017-16646" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16646/">CVE-2017-16646</cve>
	<bugzilla href="https://bugzilla.suse.com/1067105">SUSE bug 1067105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16647</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16647" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16647" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16647" ref_url="https://www.suse.com/security/cve/CVE-2017-16647" source="SUSE CVE"/>
    <description>
    drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16647/">CVE-2017-16647</cve>
	<bugzilla href="https://bugzilla.suse.com/1067102">SUSE bug 1067102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16648</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16648" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16648" ref_url="https://www.suse.com/security/cve/CVE-2017-16648" source="SUSE CVE"/>
    <description>
    The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16648/">CVE-2017-16648</cve>
	<bugzilla href="https://bugzilla.suse.com/1067087">SUSE bug 1067087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16649</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16649" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16649" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16649" ref_url="https://www.suse.com/security/cve/CVE-2017-16649" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
    <description>
    The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16649/">CVE-2017-16649</cve>
	<bugzilla href="https://bugzilla.suse.com/1067085">SUSE bug 1067085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1067115">SUSE bug 1067115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16650</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16650" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16650" ref_url="https://www.suse.com/security/cve/CVE-2017-16650" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
    <description>
    The qmi_wwan_bind function in drivers/net/usb/qmi_wwan.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16650/">CVE-2017-16650</cve>
	<bugzilla href="https://bugzilla.suse.com/1067086">SUSE bug 1067086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16808</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16808" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16808" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16808" ref_url="https://www.suse.com/security/cve/CVE-2017-16808" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005800.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3360-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007788.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1964-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-08/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2344-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html" source="SUSE-SU"/>
    <description>
    tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16808/">CVE-2017-16808</cve>
	<bugzilla href="https://bugzilla.suse.com/1068716">SUSE bug 1068716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153098">SUSE bug 1153098</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490552" comment="tcpdump-4.9.2-3.9.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16818</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16818" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16818" ref_url="https://www.suse.com/security/cve/CVE-2017-16818" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1417-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00114.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00071.html" source="SUSE-SU"/>
    <description>
    RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16818/">CVE-2017-16818</cve>
	<bugzilla href="https://bugzilla.suse.com/1063014">SUSE bug 1063014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069253">SUSE bug 1069253</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481043" comment="ceph-common-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481044" comment="libcephfs-devel-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481045" comment="libcephfs2-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481046" comment="librados-devel-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481047" comment="librados2-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481048" comment="libradospp-devel-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481049" comment="librbd-devel-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481050" comment="librbd1-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481051" comment="librgw-devel-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481052" comment="librgw2-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481053" comment="python3-ceph-argparse-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481054" comment="python3-cephfs-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481055" comment="python3-rados-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481056" comment="python3-rbd-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481057" comment="python3-rgw-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481058" comment="rados-objclass-devel-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16826</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16826" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16826" ref_url="https://www.suse.com/security/cve/CVE-2017-16826" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted PE file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16826/">CVE-2017-16826</cve>
	<bugzilla href="https://bugzilla.suse.com/1068640">SUSE bug 1068640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16827</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16827" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16827" ref_url="https://www.suse.com/security/cve/CVE-2017-16827" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (slurp_symtab invalid free and application crash) or possibly have unspecified other impact via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16827/">CVE-2017-16827</cve>
	<bugzilla href="https://bugzilla.suse.com/1069202">SUSE bug 1069202</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16828</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16828" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16828" ref_url="https://www.suse.com/security/cve/CVE-2017-16828" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16828/">CVE-2017-16828</cve>
	<bugzilla href="https://bugzilla.suse.com/1069176">SUSE bug 1069176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16829</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16829" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16829" ref_url="https://www.suse.com/security/cve/CVE-2017-16829" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2485-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029799.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16829/">CVE-2017-16829</cve>
	<bugzilla href="https://bugzilla.suse.com/1068950">SUSE bug 1068950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16830</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16830" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16830" ref_url="https://www.suse.com/security/cve/CVE-2017-16830" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16830/">CVE-2017-16830</cve>
	<bugzilla href="https://bugzilla.suse.com/1068888">SUSE bug 1068888</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16831</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16831" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16831" ref_url="https://www.suse.com/security/cve/CVE-2017-16831" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service (integer overflow and application crash, or excessive memory allocation) or possibly have unspecified other impact via a crafted PE file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16831/">CVE-2017-16831</cve>
	<bugzilla href="https://bugzilla.suse.com/1068887">SUSE bug 1068887</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16832</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16832" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16832" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16832" ref_url="https://www.suse.com/security/cve/CVE-2017-16832" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004678.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3170-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00049.html" source="SUSE-SU"/>
    <description>
    The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16832/">CVE-2017-16832</cve>
	<bugzilla href="https://bugzilla.suse.com/1068643">SUSE bug 1068643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16837</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16837" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16837" ref_url="https://www.suse.com/security/cve/CVE-2017-16837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3090-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003415.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00039.html" source="SUSE-SU"/>
    <description>
    Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module (TPM) by hooking these function pointers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16837/">CVE-2017-16837</cve>
	<bugzilla href="https://bugzilla.suse.com/1068390">SUSE bug 1068390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/889339">SUSE bug 889339</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481666" comment="tboot-20170711_1.9.8-8.32 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16840</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16840" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16840" ref_url="https://www.suse.com/security/cve/CVE-2017-16840" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0470-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0476-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00062.html" source="SUSE-SU"/>
    <description>
    The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because of incorrect buffer padding for non-Haar wavelets, related to libavcodec/vc2enc.c and libavcodec/vc2enc_dwt.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16840/">CVE-2017-16840</cve>
	<bugzilla href="https://bugzilla.suse.com/1069407">SUSE bug 1069407</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16844</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16844" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16844" ref_url="https://www.suse.com/security/cve/CVE-2017-16844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003618.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16844/">CVE-2017-16844</cve>
	<bugzilla href="https://bugzilla.suse.com/1068648">SUSE bug 1068648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480880" comment="procmail-3.22-2.34 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16845</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16845" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16845" ref_url="https://www.suse.com/security/cve/CVE-2017-16845" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00053.html" source="SUSE-SU"/>
    <description>
    hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16845/">CVE-2017-16845</cve>
	<bugzilla href="https://bugzilla.suse.com/1068613">SUSE bug 1068613</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333988" comment="qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335414" comment="qemu-arm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336533" comment="qemu-audio-alsa is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336534" comment="qemu-audio-oss is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336535" comment="qemu-audio-pa is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335210" comment="qemu-block-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335211" comment="qemu-block-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335248" comment="qemu-block-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335212" comment="qemu-block-ssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335213" comment="qemu-guest-agent is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335214" comment="qemu-ipxe is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335243" comment="qemu-kvm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335215" comment="qemu-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335244" comment="qemu-seabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335245" comment="qemu-sgabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335217" comment="qemu-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336537" comment="qemu-ui-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336538" comment="qemu-ui-gtk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335218" comment="qemu-vgabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335246" comment="qemu-x86 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16852</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16852" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16852" ref_url="https://www.suse.com/security/cve/CVE-2017-16852" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00013.html" source="SUSE-SU"/>
    <description>
    shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka SSPCPP-763.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-16852/">CVE-2017-16852</cve>
	<bugzilla href="https://bugzilla.suse.com/1068689">SUSE bug 1068689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488203" comment="libshibsp-lite7-2.6.1-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488204" comment="libshibsp7-2.6.1-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488205" comment="shibboleth-sp-2.6.1-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488206" comment="shibboleth-sp-devel-2.6.1-1.48 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16853</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16853" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16853" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16853" ref_url="https://www.suse.com/security/cve/CVE-2017-16853" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00019.html" source="SUSE-SU"/>
    <description>
    The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka CPPOST-105.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-16853/">CVE-2017-16853</cve>
	<bugzilla href="https://bugzilla.suse.com/1068685">SUSE bug 1068685</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488200" comment="libsaml-devel-2.6.1-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488201" comment="libsaml9-2.6.1-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488202" comment="opensaml-schemas-2.6.1-1.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16899</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16899" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16899" ref_url="https://www.suse.com/security/cve/CVE-2017-16899" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003635.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003636.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0498-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00081.html" source="SUSE-SU"/>
    <description>
    An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the read_textobject functions in read.c and read1_3.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16899/">CVE-2017-16899</cve>
	<bugzilla href="https://bugzilla.suse.com/1069257">SUSE bug 1069257</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489046" comment="transfig-3.2.6a-2.86 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16911</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16911" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16911" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16911" ref_url="https://www.suse.com/security/cve/CVE-2017-16911" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004055.html" source="SUSE-SU"/>
    <description>
    The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16911/">CVE-2017-16911</cve>
	<bugzilla href="https://bugzilla.suse.com/1078674">SUSE bug 1078674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16912</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16912" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16912" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16912" ref_url="https://www.suse.com/security/cve/CVE-2017-16912" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00054.html" source="SUSE-SU"/>
    <description>
    The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16912/">CVE-2017-16912</cve>
	<bugzilla href="https://bugzilla.suse.com/1078673">SUSE bug 1078673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16913</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16913" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16913" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16913" ref_url="https://www.suse.com/security/cve/CVE-2017-16913" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00054.html" source="SUSE-SU"/>
    <description>
    The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16913/">CVE-2017-16913</cve>
	<bugzilla href="https://bugzilla.suse.com/1078672">SUSE bug 1078672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716914" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16914</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16914" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16914" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16914" ref_url="https://www.suse.com/security/cve/CVE-2017-16914" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004055.html" source="SUSE-SU"/>
    <description>
    The "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16914/">CVE-2017-16914</cve>
	<bugzilla href="https://bugzilla.suse.com/1078669">SUSE bug 1078669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716927" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16927</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16927" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16927" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16927" ref_url="https://www.suse.com/security/cve/CVE-2017-16927" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005708.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005721.html" source="SUSE-SU"/>
    <description>
    The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted input stream.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16927/">CVE-2017-16927</cve>
	<bugzilla href="https://bugzilla.suse.com/1069591">SUSE bug 1069591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/442182">SUSE bug 442182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480650" comment="libpainter0-0.9.6-2.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480651" comment="librfxencode0-0.9.6-2.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480652" comment="xrdp-0.9.6-2.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480653" comment="xrdp-devel-0.9.6-2.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16939</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16939" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16939" ref_url="https://www.suse.com/security/cve/CVE-2017-16939" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3210-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3225-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3226-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3284-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3286-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3289-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3291-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3292-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3293-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3297-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3300-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3302-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3304-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3307-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3310-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3313-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3317-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3321-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3322-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3336-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3337-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3338-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00064.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0245-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0249-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0250-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0251-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0252-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0253-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0271-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0276-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0282-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0297-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0347-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005101.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16939/">CVE-2017-16939</cve>
	<bugzilla href="https://bugzilla.suse.com/1069702">SUSE bug 1069702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069708">SUSE bug 1069708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120260">SUSE bug 1120260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16994</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16994" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16994" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16994" ref_url="https://www.suse.com/security/cve/CVE-2017-16994" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16994/">CVE-2017-16994</cve>
	<bugzilla href="https://bugzilla.suse.com/1069996">SUSE bug 1069996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16995</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16995" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16995" ref_url="https://www.suse.com/security/cve/CVE-2017-16995" source="SUSE CVE"/>
    <description>
    The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16995/">CVE-2017-16995</cve>
	<bugzilla href="https://bugzilla.suse.com/1073928">SUSE bug 1073928</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16996</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16996" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16996" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16996" ref_url="https://www.suse.com/security/cve/CVE-2017-16996" source="SUSE CVE"/>
    <description>
    kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging register truncation mishandling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16996/">CVE-2017-16996</cve>
	<bugzilla href="https://bugzilla.suse.com/1073928">SUSE bug 1073928</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16997</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-16997" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16997" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-16997" ref_url="https://www.suse.com/security/cve/CVE-2017-16997" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0074-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00040.html" source="SUSE-SU"/>
    <description>
    elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16997/">CVE-2017-16997</cve>
	<bugzilla href="https://bugzilla.suse.com/1073231">SUSE bug 1073231</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17042</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17042" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17042" ref_url="https://www.suse.com/security/cve/CVE-2017-17042" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004248.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00009.html" source="SUSE-SU"/>
    <description>
    lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17042/">CVE-2017-17042</cve>
	<bugzilla href="https://bugzilla.suse.com/1070263">SUSE bug 1070263</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481678" comment="yast2-buildtools-4.1.2-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481679" comment="yast2-devtools-4.1.2-5.18 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17052</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17052" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17052" ref_url="https://www.suse.com/security/cve/CVE-2017-17052" source="SUSE CVE"/>
    <description>
    The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the -&gt;exe_file member of a new process's mm_struct, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17052/">CVE-2017-17052</cve>
	<bugzilla href="https://bugzilla.suse.com/1069496">SUSE bug 1069496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070266">SUSE bug 1070266</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17053</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17053" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17053" ref_url="https://www.suse.com/security/cve/CVE-2017-17053" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004468.html" source="SUSE-SU"/>
    <description>
    The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correctly handle errors from LDT table allocation when forking a new process, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program. This vulnerability only affected kernels built with CONFIG_MODIFY_LDT_SYSCALL=y.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-23"/>
	<updated date="2023-04-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17053/">CVE-2017-17053</cve>
	<bugzilla href="https://bugzilla.suse.com/1070264">SUSE bug 1070264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096679">SUSE bug 1096679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17081</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17081" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17081" ref_url="https://www.suse.com/security/cve/CVE-2017-17081" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0470-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0476-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00062.html" source="SUSE-SU"/>
    <description>
    The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service (integer signedness error and out-of-array read) via a crafted MPEG file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17081/">CVE-2017-17081</cve>
	<bugzilla href="https://bugzilla.suse.com/1070762">SUSE bug 1070762</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17083</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17083" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17083" ref_url="https://www.suse.com/security/cve/CVE-2017-17083" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003581.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3202-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00011.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17083/">CVE-2017-17083</cve>
	<bugzilla href="https://bugzilla.suse.com/1070727">SUSE bug 1070727</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17084</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17084" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17084" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17084" ref_url="https://www.suse.com/security/cve/CVE-2017-17084" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003581.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3202-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00011.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17084/">CVE-2017-17084</cve>
	<bugzilla href="https://bugzilla.suse.com/1070727">SUSE bug 1070727</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17085</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17085" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17085" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17085" ref_url="https://www.suse.com/security/cve/CVE-2017-17085" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3436-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0054-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003581.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3202-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00011.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17085/">CVE-2017-17085</cve>
	<bugzilla href="https://bugzilla.suse.com/1070727">SUSE bug 1070727</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17087</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17087" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17087" ref_url="https://www.suse.com/security/cve/CVE-2017-17087" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011795.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:1780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011494.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011493.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011495.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011592.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011593.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011591.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:2102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013343.html" source="SUSE-SU"/>
    <description>
    fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-11"/>
	<updated date="2022-12-28"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17087/">CVE-2017-17087</cve>
	<bugzilla href="https://bugzilla.suse.com/1065958">SUSE bug 1065958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070955">SUSE bug 1070955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009684389" comment="gvim-8.2.5038-150000.5.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684300" comment="vim-8.2.5038-150000.5.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684301" comment="vim-data-8.2.5038-150000.5.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684302" comment="vim-data-common-8.2.5038-150000.5.21.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009692514" comment="gvim-8.2.5038-150000.5.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692515" comment="vim-8.2.5038-150000.5.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684301" comment="vim-data-8.2.5038-150000.5.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684302" comment="vim-data-common-8.2.5038-150000.5.21.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009693264" comment="gvim-8.2.5038-150000.5.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693265" comment="vim-8.2.5038-150000.5.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684301" comment="vim-data-8.2.5038-150000.5.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684302" comment="vim-data-common-8.2.5038-150000.5.21.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009693738" comment="gvim-8.2.5038-150000.5.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009693739" comment="vim-8.2.5038-150000.5.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684301" comment="vim-data-8.2.5038-150000.5.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009684302" comment="vim-data-common-8.2.5038-150000.5.21.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17095</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17095" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17095" ref_url="https://www.suse.com/security/cve/CVE-2017-17095" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010261.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0480-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OF4G5SOPBRKT4CZJV5MAQLV5LXXFO62/" source="SUSE-SU"/>
    <description>
    tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17095/">CVE-2017-17095</cve>
	<bugzilla href="https://bugzilla.suse.com/1071031">SUSE bug 1071031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009665431" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009665432" comment="libtiff5-4.0.9-45.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009665458" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009665459" comment="libtiff5-4.0.9-45.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009665728" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009665729" comment="libtiff5-4.0.9-45.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009665983" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009665984" comment="libtiff5-4.0.9-45.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17121</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17121" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17121" ref_url="https://www.suse.com/security/cve/CVE-2017-17121" source="SUSE CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (memory access violation) or possibly have unspecified other impact via a COFF binary in which a relocation refers to a location after the end of the to-be-relocated section.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17121/">CVE-2017-17121</cve>
	<bugzilla href="https://bugzilla.suse.com/1071544">SUSE bug 1071544</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335833" comment="binutils-gold is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334069" comment="binutils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335832" comment="binutils-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337413" comment="binutils-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342534" comment="libctf-nobfd0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342535" comment="libctf0 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17405</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17405" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17405" ref_url="https://www.suse.com/security/cve/CVE-2017-17405" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
    <description>
    Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the "|" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17405/">CVE-2017-17405</cve>
	<bugzilla href="https://bugzilla.suse.com/1073002">SUSE bug 1073002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078782">SUSE bug 1078782</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17426</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17426" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17426" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17426" ref_url="https://www.suse.com/security/cve/CVE-2017-17426" source="SUSE CVE"/>
    <description>
    The malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block that is too small if an attempt is made to allocate an object whose size is close to SIZE_MAX, potentially leading to a subsequent heap overflow. This occurs because the per-thread cache (aka tcache) feature enables a code path that lacks an integer overflow check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-05"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17426/">CVE-2017-17426</cve>
	<bugzilla href="https://bugzilla.suse.com/1071479">SUSE bug 1071479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481151" comment="glibc-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481152" comment="glibc-32bit-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481153" comment="glibc-devel-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481154" comment="glibc-extra-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481155" comment="glibc-i18ndata-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481156" comment="glibc-info-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481157" comment="glibc-locale-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481159" comment="glibc-profile-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481160" comment="nscd-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17448</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17448" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17448" ref_url="https://www.suse.com/security/cve/CVE-2017-17448" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17448/">CVE-2017-17448</cve>
	<bugzilla href="https://bugzilla.suse.com/1071693">SUSE bug 1071693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17449</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17449" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17449" ref_url="https://www.suse.com/security/cve/CVE-2017-17449" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17449/">CVE-2017-17449</cve>
	<bugzilla href="https://bugzilla.suse.com/1071694">SUSE bug 1071694</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17450</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17450" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17450" ref_url="https://www.suse.com/security/cve/CVE-2017-17450" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:3398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00079.html" source="SUSE-SU"/>
    <description>
    net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-17450/">CVE-2017-17450</cve>
	<bugzilla href="https://bugzilla.suse.com/1071695">SUSE bug 1071695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074033">SUSE bug 1074033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17456</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17456" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17456" ref_url="https://www.suse.com/security/cve/CVE-2017-17456" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005286.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00015.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17456/">CVE-2017-17456</cve>
	<bugzilla href="https://bugzilla.suse.com/1059912">SUSE bug 1059912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071777">SUSE bug 1071777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117906">SUSE bug 1117906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334503" comment="libsndfile is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337578" comment="libsndfile-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335597" comment="libsndfile1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335598" comment="libsndfile1-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782707" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009675166" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717457" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17457</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17457" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17457" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17457" ref_url="https://www.suse.com/security/cve/CVE-2017-17457" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2074-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004320.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005286.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2214-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00015.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17457/">CVE-2017-17457</cve>
	<bugzilla href="https://bugzilla.suse.com/1059913">SUSE bug 1059913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071767">SUSE bug 1071767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117906">SUSE bug 1117906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334503" comment="libsndfile is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337578" comment="libsndfile-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335597" comment="libsndfile1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335598" comment="libsndfile1-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782707" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009675166" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17505</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17505" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17505" ref_url="https://www.suse.com/security/cve/CVE-2017-17505" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-11"/>
	<updated date="2022-06-30"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17505/">CVE-2017-17505</cve>
	<bugzilla href="https://bugzilla.suse.com/1072087">SUSE bug 1072087</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009692668" comment="hdf5-gnu-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692669" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692670" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692671" comment="hdf5-gnu-openmpi2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692672" comment="hdf5-hpc-examples-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692673" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692674" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692675" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692676" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692677" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692678" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692679" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692680" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692681" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692682" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692683" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692684" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692685" comment="hdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692686" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692687" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692688" comment="hdf5_1_10_8-gnu-openmpi2-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692689" comment="hdf5_1_10_8-hpc-examples-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692690" comment="libhdf5-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692691" comment="libhdf5-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692692" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692693" comment="libhdf5-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692694" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692695" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692696" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692697" comment="libhdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692698" comment="libhdf5_cpp-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692699" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692700" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692701" comment="libhdf5_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692702" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692703" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692704" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692705" comment="libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692706" comment="libhdf5_fortran-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692707" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692708" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692709" comment="libhdf5_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692710" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692711" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692712" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692713" comment="libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692714" comment="libhdf5_hl-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692715" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692716" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692717" comment="libhdf5_hl-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692718" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692719" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692720" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692721" comment="libhdf5_hl_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692722" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692723" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692724" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692725" comment="libhdf5_hl_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692726" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692727" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692728" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692729" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692730" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692731" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692732" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692733" comment="libhdf5_hl_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692734" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692735" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692736" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692737" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17506</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17506" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17506" ref_url="https://www.suse.com/security/cve/CVE-2017-17506" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-11"/>
	<updated date="2022-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17506/">CVE-2017-17506</cve>
	<bugzilla href="https://bugzilla.suse.com/1072090">SUSE bug 1072090</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009692668" comment="hdf5-gnu-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692669" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692670" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692671" comment="hdf5-gnu-openmpi2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692672" comment="hdf5-hpc-examples-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692673" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692674" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692675" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692676" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692677" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692678" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692679" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692680" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692681" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692682" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692683" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692684" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692685" comment="hdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692686" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692687" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692688" comment="hdf5_1_10_8-gnu-openmpi2-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692689" comment="hdf5_1_10_8-hpc-examples-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692690" comment="libhdf5-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692691" comment="libhdf5-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692692" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692693" comment="libhdf5-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692694" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692695" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692696" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692697" comment="libhdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692698" comment="libhdf5_cpp-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692699" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692700" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692701" comment="libhdf5_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692702" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692703" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692704" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692705" comment="libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692706" comment="libhdf5_fortran-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692707" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692708" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692709" comment="libhdf5_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692710" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692711" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692712" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692713" comment="libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692714" comment="libhdf5_hl-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692715" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692716" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692717" comment="libhdf5_hl-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692718" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692719" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692720" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692721" comment="libhdf5_hl_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692722" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692723" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692724" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692725" comment="libhdf5_hl_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692726" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692727" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692728" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692729" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692730" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692731" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692732" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692733" comment="libhdf5_hl_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692734" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692735" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692736" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692737" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17508</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17508" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17508" ref_url="https://www.suse.com/security/cve/CVE-2017-17508" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-11"/>
	<updated date="2022-06-30"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17508/">CVE-2017-17508</cve>
	<bugzilla href="https://bugzilla.suse.com/1072108">SUSE bug 1072108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009692668" comment="hdf5-gnu-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692669" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692670" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692671" comment="hdf5-gnu-openmpi2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692672" comment="hdf5-hpc-examples-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692673" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692674" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692675" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692676" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692677" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692678" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692679" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692680" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692681" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692682" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692683" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692684" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692685" comment="hdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692686" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692687" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692688" comment="hdf5_1_10_8-gnu-openmpi2-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692689" comment="hdf5_1_10_8-hpc-examples-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692690" comment="libhdf5-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692691" comment="libhdf5-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692692" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692693" comment="libhdf5-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692694" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692695" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692696" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692697" comment="libhdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692698" comment="libhdf5_cpp-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692699" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692700" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692701" comment="libhdf5_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692702" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692703" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692704" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692705" comment="libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692706" comment="libhdf5_fortran-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692707" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692708" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692709" comment="libhdf5_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692710" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692711" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692712" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692713" comment="libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692714" comment="libhdf5_hl-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692715" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692716" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692717" comment="libhdf5_hl-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692718" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692719" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692720" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692721" comment="libhdf5_hl_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692722" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692723" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692724" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692725" comment="libhdf5_hl_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692726" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692727" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692728" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692729" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692730" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692731" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692732" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692733" comment="libhdf5_hl_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692734" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692735" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692736" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692737" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17509</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17509" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17509" ref_url="https://www.suse.com/security/cve/CVE-2017-17509" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1911-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011231.html" source="SUSE-SU"/>
    <description>
    In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-11"/>
	<updated date="2022-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17509/">CVE-2017-17509</cve>
	<bugzilla href="https://bugzilla.suse.com/1072111">SUSE bug 1072111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009692668" comment="hdf5-gnu-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692669" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692670" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692671" comment="hdf5-gnu-openmpi2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692672" comment="hdf5-hpc-examples-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692673" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692674" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692675" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692676" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692677" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692678" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692679" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692680" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692681" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692682" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692683" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692684" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692685" comment="hdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692686" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692687" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692688" comment="hdf5_1_10_8-gnu-openmpi2-hpc-module-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692689" comment="hdf5_1_10_8-hpc-examples-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692690" comment="libhdf5-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692691" comment="libhdf5-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692692" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692693" comment="libhdf5-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692694" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692695" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692696" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692697" comment="libhdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692698" comment="libhdf5_cpp-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692699" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692700" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692701" comment="libhdf5_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692702" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692703" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692704" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692705" comment="libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692706" comment="libhdf5_fortran-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692707" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692708" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692709" comment="libhdf5_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692710" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692711" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692712" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692713" comment="libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692714" comment="libhdf5_hl-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692715" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692716" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692717" comment="libhdf5_hl-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692718" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692719" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692720" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692721" comment="libhdf5_hl_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692722" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692723" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692724" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692725" comment="libhdf5_hl_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692726" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692727" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692728" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692729" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692730" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692731" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692732" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692733" comment="libhdf5_hl_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692734" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692735" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692736" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009692737" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17555</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17555" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17555" ref_url="https://www.suse.com/security/cve/CVE-2017-17555" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:0470-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0476-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html" source="SUSE-SU"/>
    <description>
    The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17555/">CVE-2017-17555</cve>
	<bugzilla href="https://bugzilla.suse.com/1072366">SUSE bug 1072366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17558</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17558" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17558" ref_url="https://www.suse.com/security/cve/CVE-2017-17558" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
    <description>
    The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17558/">CVE-2017-17558</cve>
	<bugzilla href="https://bugzilla.suse.com/1072561">SUSE bug 1072561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17681</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17681" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17681" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17681" ref_url="https://www.suse.com/security/cve/CVE-2017-17681" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003702.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0396-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00025.html" source="SUSE-SU"/>
    <description>
    In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17681/">CVE-2017-17681</cve>
	<bugzilla href="https://bugzilla.suse.com/1072901">SUSE bug 1072901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334086" comment="ImageMagick is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342670" comment="ImageMagick-config-7-SUSE is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342671" comment="ImageMagick-config-7-upstream is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335941" comment="ImageMagick-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342672" comment="libMagick++-7_Q16HDRI4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335943" comment="libMagick++-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342673" comment="libMagickCore-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342674" comment="libMagickWand-7_Q16HDRI6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335944" comment="perl-PerlMagick is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17688</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17688" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17688" ref_url="https://www.suse.com/security/cve/CVE-2017-17688" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1347-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00096.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an obsolete packet type, not a problem in the OpenPGP specification.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17688/">CVE-2017-17688</cve>
	<bugzilla href="https://bugzilla.suse.com/1093151">SUSE bug 1093151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093727">SUSE bug 1093727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093971">SUSE bug 1093971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093973">SUSE bug 1093973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115719">SUSE bug 1115719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489055" comment="enigmail-2.0.9-3.13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336118" comment="MozillaFirefox-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336119" comment="MozillaFirefox-translations-common is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342425" comment="MozillaFirefox-translations-other is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334049" comment="mutt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624971" comment="mutt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624972" comment="mutt-lang is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17689</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17689" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17689" ref_url="https://www.suse.com/security/cve/CVE-2017-17689" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1329-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1347-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1392-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00096.html" source="SUSE-SU"/>
    <description>
    The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17689/">CVE-2017-17689</cve>
	<bugzilla href="https://bugzilla.suse.com/1093152">SUSE bug 1093152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093727">SUSE bug 1093727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093969">SUSE bug 1093969</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489055" comment="enigmail-2.0.9-3.13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334049" comment="mutt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624971" comment="mutt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009624972" comment="mutt-lang is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17712</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17712" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17712" ref_url="https://www.suse.com/security/cve/CVE-2017-17712" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0269-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00087.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0277-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0278-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0281-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0282-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0294-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00097.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00098.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0297-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00100.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0340-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0347-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0433-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0436-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html" source="SUSE-SU"/>
    <description>
    The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet-&gt;hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17712/">CVE-2017-17712</cve>
	<bugzilla href="https://bugzilla.suse.com/1073229">SUSE bug 1073229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073230">SUSE bug 1073230</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17725</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17725" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17725" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17725" ref_url="https://www.suse.com/security/cve/CVE-2017-17725" source="SUSE CVE"/>
    <description>
    In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of service via a crafted image file. Note that this vulnerability is different from CVE-2017-14864, which is an invalid memory address dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-03-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17725/">CVE-2017-17725</cve>
	<bugzilla href="https://bugzilla.suse.com/1080734">SUSE bug 1080734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184749">SUSE bug 1184749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334027" comment="exiv2 is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17740</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17740" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17740" ref_url="https://www.suse.com/security/cve/CVE-2017-17740" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006432.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:10-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:11-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:12-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:13-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:14-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006346.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006954.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004970.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005325.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005929.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2157-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html" source="SUSE-SU"/>
    <description>
    contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17740/">CVE-2017-17740</cve>
	<bugzilla href="https://bugzilla.suse.com/1073313">SUSE bug 1073313</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334211" comment="openldap2 is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496076" comment="openldap2-devel-32bit-2.4.46-9.19.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336627" comment="libldap-2_4-2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337867" comment="libldap-2_4-2-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337992" comment="libldap-data is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334211" comment="openldap2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336628" comment="openldap2-back-meta is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337993" comment="openldap2-back-perl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334337" comment="openldap2-client is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337994" comment="openldap2-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337995" comment="openldap2-devel-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337996" comment="openldap2-devel-static is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336626" comment="openldap2-ppolicy-check-password is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336627" comment="libldap-2_4-2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337867" comment="libldap-2_4-2-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337992" comment="libldap-data is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334337" comment="openldap2-client is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337994" comment="openldap2-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337995" comment="openldap2-devel-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337996" comment="openldap2-devel-static is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009490477" comment="libldap-2_4-2-2.4.46-9.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490478" comment="libldap-2_4-2-32bit-2.4.46-9.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490479" comment="openldap2-client-2.4.46-9.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490480" comment="openldap2-devel-2.4.46-9.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490481" comment="openldap2-devel-static-2.4.46-9.19.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009496995" comment="openldap2-2.4.46-9.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496996" comment="openldap2-back-meta-2.4.46-9.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496997" comment="openldap2-back-perl-2.4.46-9.19.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17741</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17741" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17741" ref_url="https://www.suse.com/security/cve/CVE-2017-17741" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0555-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0660-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004211.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005474.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00040.html" source="SUSE-SU"/>
    <description>
    The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c and include/trace/events/kvm.h.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17741/">CVE-2017-17741</cve>
	<bugzilla href="https://bugzilla.suse.com/1073311">SUSE bug 1073311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17742</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17742" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17742" ref_url="https://www.suse.com/security/cve/CVE-2017-17742" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1771-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html" source="SUSE-SU"/>
    <description>
    Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 allows an HTTP Response Splitting attack. An attacker can inject a crafted key and value into an HTTP response for the HTTP server of WEBrick.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-17742/">CVE-2017-17742</cve>
	<bugzilla href="https://bugzilla.suse.com/1087434">SUSE bug 1087434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136906">SUSE bug 1136906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152992">SUSE bug 1152992</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334078" comment="ruby is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334078" comment="ruby is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335910" comment="ruby-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009490263" comment="libruby2_5-2_5-2.5.5-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490264" comment="ruby2.5-2.5.5-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490265" comment="ruby2.5-devel-2.5.5-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490266" comment="ruby2.5-devel-extra-2.5.5-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490267" comment="ruby2.5-stdlib-2.5.5-4.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17784</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17784" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17784" ref_url="https://www.suse.com/security/cve/CVE-2017-17784" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:0014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0027-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LKBDGMCM5XJOHFKTACI2CEISBTSKVLD3/" source="SUSE-SU"/>
    <description>
    In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-08-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17784/">CVE-2017-17784</cve>
	<bugzilla href="https://bugzilla.suse.com/1073624">SUSE bug 1073624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009509245" comment="gimp-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509246" comment="gimp-devel-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509247" comment="gimp-lang-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509248" comment="gimp-plugins-python-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509249" comment="libgimp-2_0-0-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509250" comment="libgimpui-2_0-0-2.8.22-5.11.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717785" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17785</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17785" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17785" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17785" ref_url="https://www.suse.com/security/cve/CVE-2017-17785" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0027-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LKBDGMCM5XJOHFKTACI2CEISBTSKVLD3/" source="SUSE-SU"/>
    <description>
    In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17785/">CVE-2017-17785</cve>
	<bugzilla href="https://bugzilla.suse.com/1073625">SUSE bug 1073625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009509245" comment="gimp-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509246" comment="gimp-devel-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509247" comment="gimp-lang-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509248" comment="gimp-plugins-python-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509249" comment="libgimp-2_0-0-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509250" comment="libgimpui-2_0-0-2.8.22-5.11.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17786</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17786" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17786" ref_url="https://www.suse.com/security/cve/CVE-2017-17786" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0601-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006584.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0014-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008130.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:0027-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LKBDGMCM5XJOHFKTACI2CEISBTSKVLD3/" source="SUSE-SU"/>
    <description>
    In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17786/">CVE-2017-17786</cve>
	<bugzilla href="https://bugzilla.suse.com/1073626">SUSE bug 1073626</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009509245" comment="gimp-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509246" comment="gimp-devel-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509247" comment="gimp-lang-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509248" comment="gimp-plugins-python-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509249" comment="libgimp-2_0-0-2.8.22-5.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509250" comment="libgimpui-2_0-0-2.8.22-5.11.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17787</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17787" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17787" ref_url="https://www.suse.com/security/cve/CVE-2017-17787" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008124.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3944-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008128.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:2357-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/A3C7V5LBPIDK275MYNBQSOQOYW6KAMBL/" source="SUSE-SU"/>
    <description>
    In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17787/">CVE-2017-17787</cve>
	<bugzilla href="https://bugzilla.suse.com/1073628">SUSE bug 1073628</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009509228" comment="gimp-2.8.22-5.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509229" comment="gimp-devel-2.8.22-5.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509230" comment="gimp-lang-2.8.22-5.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509231" comment="gimp-plugins-python-2.8.22-5.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509232" comment="libgimp-2_0-0-2.8.22-5.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509233" comment="libgimpui-2_0-0-2.8.22-5.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17789</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17789" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17789" ref_url="https://www.suse.com/security/cve/CVE-2017-17789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007400.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1420-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00034.html" source="SUSE-SU"/>
    <description>
    In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17789/">CVE-2017-17789</cve>
	<bugzilla href="https://bugzilla.suse.com/1073627">SUSE bug 1073627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009509191" comment="gimp-2.8.22-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509192" comment="gimp-devel-2.8.22-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509193" comment="gimp-lang-2.8.22-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509194" comment="gimp-plugins-python-2.8.22-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509195" comment="libgimp-2_0-0-2.8.22-5.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509196" comment="libgimpui-2_0-0-2.8.22-5.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17790</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17790" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17790" ref_url="https://www.suse.com/security/cve/CVE-2017-17790" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006905.html" source="SUSE-SU"/>
    <description>
    The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different vulnerability than CVE-2017-17405. NOTE: situations with untrusted input may be highly unlikely.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17790/">CVE-2017-17790</cve>
	<bugzilla href="https://bugzilla.suse.com/1073002">SUSE bug 1073002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078782">SUSE bug 1078782</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17805</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17805" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17805" ref_url="https://www.suse.com/security/cve/CVE-2017-17805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html" source="SUSE-SU"/>
    <description>
    The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17805/">CVE-2017-17805</cve>
	<bugzilla href="https://bugzilla.suse.com/1073792">SUSE bug 1073792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17806</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17806" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17806" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17806" ref_url="https://www.suse.com/security/cve/CVE-2017-17806" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html" source="SUSE-SU"/>
    <description>
    The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17806/">CVE-2017-17806</cve>
	<bugzilla href="https://bugzilla.suse.com/1073874">SUSE bug 1073874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17810</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17810" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17810" ref_url="https://www.suse.com/security/cve/CVE-2017-17810" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007088.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17810/">CVE-2017-17810</cve>
	<bugzilla href="https://bugzilla.suse.com/1073796">SUSE bug 1073796</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17811</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17811" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17811" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17811" ref_url="https://www.suse.com/security/cve/CVE-2017-17811" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007088.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17811/">CVE-2017-17811</cve>
	<bugzilla href="https://bugzilla.suse.com/1073798">SUSE bug 1073798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17812</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17812" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17812" ref_url="https://www.suse.com/security/cve/CVE-2017-17812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007088.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17812/">CVE-2017-17812</cve>
	<bugzilla href="https://bugzilla.suse.com/1073799">SUSE bug 1073799</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17813</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17813" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17813" ref_url="https://www.suse.com/security/cve/CVE-2017-17813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007088.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17813/">CVE-2017-17813</cve>
	<bugzilla href="https://bugzilla.suse.com/1073803">SUSE bug 1073803</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17814</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17814" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17814" ref_url="https://www.suse.com/security/cve/CVE-2017-17814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007088.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17814/">CVE-2017-17814</cve>
	<bugzilla href="https://bugzilla.suse.com/1073808">SUSE bug 1073808</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17815</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17815" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17815" ref_url="https://www.suse.com/security/cve/CVE-2017-17815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007088.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17815/">CVE-2017-17815</cve>
	<bugzilla href="https://bugzilla.suse.com/1073818">SUSE bug 1073818</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17816</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17816" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17816" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17816" ref_url="https://www.suse.com/security/cve/CVE-2017-17816" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007088.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17816/">CVE-2017-17816</cve>
	<bugzilla href="https://bugzilla.suse.com/1073823">SUSE bug 1073823</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17817</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17817" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17817" ref_url="https://www.suse.com/security/cve/CVE-2017-17817" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007088.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17817/">CVE-2017-17817</cve>
	<bugzilla href="https://bugzilla.suse.com/1073829">SUSE bug 1073829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17818</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17818" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17818" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17818" ref_url="https://www.suse.com/security/cve/CVE-2017-17818" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007088.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17818/">CVE-2017-17818</cve>
	<bugzilla href="https://bugzilla.suse.com/1073830">SUSE bug 1073830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17819</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17819" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17819" ref_url="https://www.suse.com/security/cve/CVE-2017-17819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007088.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17819/">CVE-2017-17819</cve>
	<bugzilla href="https://bugzilla.suse.com/1073832">SUSE bug 1073832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17820</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17820" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17820" ref_url="https://www.suse.com/security/cve/CVE-2017-17820" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007088.html" source="SUSE-SU"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17820/">CVE-2017-17820</cve>
	<bugzilla href="https://bugzilla.suse.com/1073846">SUSE bug 1073846</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17833</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17833" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17833" ref_url="https://www.suse.com/security/cve/CVE-2017-17833" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1916-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004251.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1917-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004252.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004575.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2779-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004710.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2991-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2991-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005372.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1958-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2813-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-09/msg00063.html" source="SUSE-SU"/>
    <description>
    OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-17833/">CVE-2017-17833</cve>
	<bugzilla href="https://bugzilla.suse.com/1090638">SUSE bug 1090638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099519">SUSE bug 1099519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126909">SUSE bug 1126909</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334515" comment="openslp is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674338" comment="openslp-server-2.0.0-6.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334515" comment="openslp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335700" comment="openslp-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337311" comment="openslp-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335701" comment="openslp-server is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009674337" comment="openslp-2.0.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782719" comment="openslp-32bit-2.0.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782720" comment="openslp-devel-2.0.0-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17852</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17852" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17852" ref_url="https://www.suse.com/security/cve/CVE-2017-17852" source="SUSE CVE"/>
    <description>
    kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging mishandling of 32-bit ALU ops.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17852/">CVE-2017-17852</cve>
	<bugzilla href="https://bugzilla.suse.com/1073928">SUSE bug 1073928</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17853</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17853" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17853" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17853" ref_url="https://www.suse.com/security/cve/CVE-2017-17853" source="SUSE CVE"/>
    <description>
    kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect BPF_RSH signed bounds calculations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17853/">CVE-2017-17853</cve>
	<bugzilla href="https://bugzilla.suse.com/1073928">SUSE bug 1073928</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717854" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17854</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17854" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17854" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17854" ref_url="https://www.suse.com/security/cve/CVE-2017-17854" source="SUSE CVE"/>
    <description>
    kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (integer overflow and memory corruption) or possibly have unspecified other impact by leveraging unrestricted integer values for pointer arithmetic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-17854/">CVE-2017-17854</cve>
	<bugzilla href="https://bugzilla.suse.com/1073928">SUSE bug 1073928</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17855</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17855" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17855" ref_url="https://www.suse.com/security/cve/CVE-2017-17855" source="SUSE CVE"/>
    <description>
    kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging improper use of pointers in place of scalars.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17855/">CVE-2017-17855</cve>
	<bugzilla href="https://bugzilla.suse.com/1073928">SUSE bug 1073928</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17856</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17856" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17856" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17856" ref_url="https://www.suse.com/security/cve/CVE-2017-17856" source="SUSE CVE"/>
    <description>
    kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging the lack of stack-pointer alignment enforcement.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17856/">CVE-2017-17856</cve>
	<bugzilla href="https://bugzilla.suse.com/1073928">SUSE bug 1073928</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17857</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17857" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17857" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17857" ref_url="https://www.suse.com/security/cve/CVE-2017-17857" source="SUSE CVE"/>
    <description>
    The check_stack_boundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging mishandling of invalid variable stack read operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17857/">CVE-2017-17857</cve>
	<bugzilla href="https://bugzilla.suse.com/1073928">SUSE bug 1073928</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17862</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17862" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17862" ref_url="https://www.suse.com/security/cve/CVE-2017-17862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009856.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html" source="SUSE-SU"/>
    <description>
    kernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores unreachable code, even though it would still be processed by JIT compilers. This behavior, also considered an improper branch-pruning logic issue, could possibly be used by local users for denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17862/">CVE-2017-17862</cve>
	<bugzilla href="https://bugzilla.suse.com/1073928">SUSE bug 1073928</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17864</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17864" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17864" ref_url="https://www.suse.com/security/cve/CVE-2017-17864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3935-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009856.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html" source="SUSE-SU"/>
    <description>
    kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17864/">CVE-2017-17864</cve>
	<bugzilla href="https://bugzilla.suse.com/1073928">SUSE bug 1073928</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717916" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17916</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17916" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17916" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17916" ref_url="https://www.suse.com/security/cve/CVE-2017-17916" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** SQL injection vulnerability in the 'find_by' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-21"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17916/">CVE-2017-17916</cve>
	<bugzilla href="https://bugzilla.suse.com/1074346">SUSE bug 1074346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009729779" comment="ruby2.5-rubygem-rails-5_1 is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717917" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17917</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17917" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17917" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17917" ref_url="https://www.suse.com/security/cve/CVE-2017-17917" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** SQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-21"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17917/">CVE-2017-17917</cve>
	<bugzilla href="https://bugzilla.suse.com/1074347">SUSE bug 1074347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009729779" comment="ruby2.5-rubygem-rails-5_1 is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717919" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17919</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17919" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17919" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17919" ref_url="https://www.suse.com/security/cve/CVE-2017-17919" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-21"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17919/">CVE-2017-17919</cve>
	<bugzilla href="https://bugzilla.suse.com/1074348">SUSE bug 1074348</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009729779" comment="ruby2.5-rubygem-rails-5_1 is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717920" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17920</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17920" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17920" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17920" ref_url="https://www.suse.com/security/cve/CVE-2017-17920" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-21"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17920/">CVE-2017-17920</cve>
	<bugzilla href="https://bugzilla.suse.com/1074349">SUSE bug 1074349</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009729779" comment="ruby2.5-rubygem-rails-5_1 is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17969</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17969" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17969" ref_url="https://www.suse.com/security/cve/CVE-2017-17969" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00040.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17969/">CVE-2017-17969</cve>
	<bugzilla href="https://bugzilla.suse.com/1077725">SUSE bug 1077725</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480858" comment="p7zip-16.02-5.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17975</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-17975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17975" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-17975" ref_url="https://www.suse.com/security/cve/CVE-2017-17975" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00054.html" source="SUSE-SU"/>
    <description>
    Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 allows attackers to cause a denial of service (system crash) or possibly have unspecified other impact by triggering failure of audio registration, because a kfree of the usbtv data structure occurs during a usbtv_video_free call, but the usbtv_video_fail label's code attempts to both access and free this data structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17975/">CVE-2017-17975</cve>
	<bugzilla href="https://bugzilla.suse.com/1074426">SUSE bug 1074426</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18009</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18009" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18009" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18009" ref_url="https://www.suse.com/security/cve/CVE-2017-18009" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2018:1438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1697-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00026.html" source="SUSE-SU"/>
    <description>
    In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18009/">CVE-2017-18009</cve>
	<bugzilla href="https://bugzilla.suse.com/1074312">SUSE bug 1074312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488925" comment="libopencv3_3-3.3.1-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488926" comment="opencv-3.3.1-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488927" comment="opencv-devel-3.3.1-4.5 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18013</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18013" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18013" ref_url="https://www.suse.com/security/cve/CVE-2017-18013" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004101.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004247.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1956-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00017.html" source="SUSE-SU"/>
    <description>
    In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18013/">CVE-2017-18013</cve>
	<bugzilla href="https://bugzilla.suse.com/1074317">SUSE bug 1074317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082825">SUSE bug 1082825</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782688" comment="libtiff5-32bit-4.0.9-5.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782686" comment="libtiff-devel-4.0.9-5.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782687" comment="libtiff5-4.0.9-5.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18075</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18075" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18075" ref_url="https://www.suse.com/security/cve/CVE-2017-18075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0568-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0574-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0575-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0576-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0577-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0578-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0579-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0584-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0586-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0593-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0596-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0597-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00021.html" source="SUSE-SU"/>
    <description>
    crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_CRYPTO_USER_API_AEAD) and pcrypt (CONFIG_CRYPTO_PCRYPT) to cause a denial of service (kfree of an incorrect pointer) or possibly have unspecified other impact by executing a crafted sequence of system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18075/">CVE-2017-18075</cve>
	<bugzilla href="https://bugzilla.suse.com/1077402">SUSE bug 1077402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077404">SUSE bug 1077404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18078</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18078" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18078" ref_url="https://www.suse.com/security/cve/CVE-2017-18078" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003753.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0560-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00109.html" source="SUSE-SU"/>
    <description>
    systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protected_hardlinks sysctl is turned off, which allows local users to bypass intended access restrictions via vectors involving a hard link to a file for which the user lacks write access, as demonstrated by changing the ownership of the /etc/passwd file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18078/">CVE-2017-18078</cve>
	<bugzilla href="https://bugzilla.suse.com/1077925">SUSE bug 1077925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481501" comment="libsystemd0-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481502" comment="libsystemd0-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481503" comment="libudev-devel-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481504" comment="libudev1-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481505" comment="libudev1-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481506" comment="systemd-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481507" comment="systemd-32bit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481508" comment="systemd-bash-completion-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481509" comment="systemd-container-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481510" comment="systemd-coredump-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481511" comment="systemd-devel-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481512" comment="systemd-sysvinit-234-24.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481513" comment="udev-234-24.25.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18183</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18183" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18183" ref_url="https://www.suse.com/security/cve/CVE-2017-18183" source="SUSE CVE"/>
    <description>
    An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject() function in libqpdf/QPDFWriter.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18183/">CVE-2017-18183</cve>
	<bugzilla href="https://bugzilla.suse.com/1080935">SUSE bug 1080935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009726870" comment="libqpdf21 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339025" comment="qpdf is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655180" comment="qpdf-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18184</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18184" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18184" ref_url="https://www.suse.com/security/cve/CVE-2017-18184" source="SUSE CVE"/>
    <description>
    An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in QPDF_encryption.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18184/">CVE-2017-18184</cve>
	<bugzilla href="https://bugzilla.suse.com/1080952">SUSE bug 1080952</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009726870" comment="libqpdf21 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339025" comment="qpdf is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655180" comment="qpdf-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18186</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18186" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18186" ref_url="https://www.suse.com/security/cve/CVE-2017-18186" source="SUSE CVE"/>
    <description>
    An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18186/">CVE-2017-18186</cve>
	<bugzilla href="https://bugzilla.suse.com/1080925">SUSE bug 1080925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009726870" comment="libqpdf21 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339025" comment="qpdf is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655180" comment="qpdf-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18199</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18199" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18199" ref_url="https://www.suse.com/security/cve/CVE-2017-18199" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007472.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007617.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2294-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00040.html" source="SUSE-SU"/>
    <description>
    realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18199/">CVE-2017-18199</cve>
	<bugzilla href="https://bugzilla.suse.com/1082821">SUSE bug 1082821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790354" comment="libcdio++0-0.94-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790355" comment="libcdio-devel-0.94-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782721" comment="libcdio16-0.94-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782722" comment="libiso9660-10-0.94-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790356" comment="libudf0-0.94-6.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18201</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18201" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18201" ref_url="https://www.suse.com/security/cve/CVE-2017-18201" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2236-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004383.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2294-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00040.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18201/">CVE-2017-18201</cve>
	<bugzilla href="https://bugzilla.suse.com/1082877">SUSE bug 1082877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790354" comment="libcdio++0-0.94-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790355" comment="libcdio-devel-0.94-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782721" comment="libcdio16-0.94-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782722" comment="libiso9660-10-0.94-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790356" comment="libudf0-0.94-6.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18202</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18202" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18202" ref_url="https://www.suse.com/security/cve/CVE-2017-18202" source="SUSE CVE"/>
    <description>
    The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18202/">CVE-2017-18202</cve>
	<bugzilla href="https://bugzilla.suse.com/1083088">SUSE bug 1083088</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18203</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18203" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18203" ref_url="https://www.suse.com/security/cve/CVE-2017-18203" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1220-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1221-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004055.html" source="SUSE-SU"/>
    <description>
    The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18203/">CVE-2017-18203</cve>
	<bugzilla href="https://bugzilla.suse.com/1083242">SUSE bug 1083242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18204</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18204" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18204" ref_url="https://www.suse.com/security/cve/CVE-2017-18204" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3501-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007845.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007846.html" source="SUSE-SU"/>
    <description>
    The ocfs2_setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of service (deadlock) via DIO requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18204/">CVE-2017-18204</cve>
	<bugzilla href="https://bugzilla.suse.com/1083244">SUSE bug 1083244</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18205</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18205" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18205" ref_url="https://www.suse.com/security/cve/CVE-2017-18205" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1072-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010436.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00073.html" source="SUSE-SU"/>
    <description>
    In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18205/">CVE-2017-18205</cve>
	<bugzilla href="https://bugzilla.suse.com/1082998">SUSE bug 1082998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200039">SUSE bug 1200039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339511" comment="zsh is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18206</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18206" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18206" ref_url="https://www.suse.com/security/cve/CVE-2017-18206" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1072-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:14910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010436.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1093-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00073.html" source="SUSE-SU"/>
    <description>
    In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18206/">CVE-2017-18206</cve>
	<bugzilla href="https://bugzilla.suse.com/1083002">SUSE bug 1083002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215218">SUSE bug 1215218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339511" comment="zsh is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18207</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18207" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18207" ref_url="https://www.suse.com/security/cve/CVE-2017-18207" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003890.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004216.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2040-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004297.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004497.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0302-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006445.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0966-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2126-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18207/">CVE-2017-18207</cve>
	<bugzilla href="https://bugzilla.suse.com/1083507">SUSE bug 1083507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18208</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18208" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18208" ref_url="https://www.suse.com/security/cve/CVE-2017-18208" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0848-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0781-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00054.html" source="SUSE-SU"/>
    <description>
    The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18208/">CVE-2017-18208</cve>
	<bugzilla href="https://bugzilla.suse.com/1083494">SUSE bug 1083494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18222</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18222" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18222" ref_url="https://www.suse.com/security/cve/CVE-2017-18222" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 4.12, Hisilicon Network Subsystem (HNS) does not consider the ETH_SS_PRIV_FLAGS case when retrieving sset_count data, which allows local users to cause a denial of service (buffer overflow and memory corruption) or possibly have unspecified other impact, as demonstrated by incompatibility between hns_get_sset_count and ethtool_get_strings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18222/">CVE-2017-18222</cve>
	<bugzilla href="https://bugzilla.suse.com/1084529">SUSE bug 1084529</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18224</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18224" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18224" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18224" ref_url="https://www.suse.com/security/cve/CVE-2017-18224" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:3589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004818.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004821.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004903.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-November/004905.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004951.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4072-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004953.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3658-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-11/msg00001.html" source="SUSE-SU"/>
    <description>
    In the Linux kernel before 4.15, fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allows local users to cause a denial of service (BUG) by modifying a certain e_cpos field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18224/">CVE-2017-18224</cve>
	<bugzilla href="https://bugzilla.suse.com/1084831">SUSE bug 1084831</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718235" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18235</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18235" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18235" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18235" ref_url="https://www.suse.com/security/cve/CVE-2017-18235" source="SUSE CVE"/>
    <description>
    An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Support.cpp does not ensure nonzero widths and heights, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted .webp file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18235/">CVE-2017-18235</cve>
	<bugzilla href="https://bugzilla.suse.com/1085587">SUSE bug 1085587</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335989" comment="libexempi-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335988" comment="libexempi3 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18237</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18237" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18237" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18237" ref_url="https://www.suse.com/security/cve/CVE-2017-18237" source="SUSE CVE"/>
    <description>
    An issue was discovered in Exempi before 2.4.3. The PostScript_Support::ConvertToDate function in XMPFiles/source/FormatSupport/PostScript_Support.cpp allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted .ps file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18237/">CVE-2017-18237</cve>
	<bugzilla href="https://bugzilla.suse.com/1085590">SUSE bug 1085590</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335989" comment="libexempi-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335988" comment="libexempi3 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18242</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18242" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18242" ref_url="https://www.suse.com/security/cve/CVE-2017-18242" source="SUSE CVE"/>
    <description>
    The apply_dependent_coupling function in libavcodec/aacdec.c in Libav 12.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18242/">CVE-2017-18242</cve>
	<bugzilla href="https://bugzilla.suse.com/1086647">SUSE bug 1086647</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334365" comment="ffmpeg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631051" comment="libavdevice57 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631054" comment="libavfilter6 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337828" comment="libavcodec-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348272" comment="libavcodec57 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631049" comment="libavcodec57-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631050" comment="libavdevice-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631051" comment="libavdevice57 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631052" comment="libavdevice57-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631053" comment="libavfilter-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631054" comment="libavfilter6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631055" comment="libavfilter6-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337829" comment="libavformat-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337830" comment="libavformat57 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631056" comment="libavformat57-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337831" comment="libavresample-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337832" comment="libavresample3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009626505" comment="libavresample3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348273" comment="libavutil-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348274" comment="libavutil55 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631057" comment="libavutil55-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348275" comment="libpostproc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348276" comment="libpostproc54 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631058" comment="libpostproc54-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348277" comment="libswresample-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348278" comment="libswresample2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631059" comment="libswresample2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348279" comment="libswscale-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348280" comment="libswscale4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631060" comment="libswscale4-32bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18244</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18244" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18244" ref_url="https://www.suse.com/security/cve/CVE-2017-18244" source="SUSE CVE"/>
    <description>
    The stereo_processing function in libavcodec/aacps.c in Libav 12.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file, related to ff_ps_apply.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18244/">CVE-2017-18244</cve>
	<bugzilla href="https://bugzilla.suse.com/1086642">SUSE bug 1086642</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334365" comment="ffmpeg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631051" comment="libavdevice57 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631054" comment="libavfilter6 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337828" comment="libavcodec-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348272" comment="libavcodec57 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631049" comment="libavcodec57-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631050" comment="libavdevice-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631051" comment="libavdevice57 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631052" comment="libavdevice57-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631053" comment="libavfilter-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631054" comment="libavfilter6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631055" comment="libavfilter6-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337829" comment="libavformat-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337830" comment="libavformat57 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631056" comment="libavformat57-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337831" comment="libavresample-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337832" comment="libavresample3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009626505" comment="libavresample3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348273" comment="libavutil-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348274" comment="libavutil55 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631057" comment="libavutil55-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348275" comment="libpostproc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348276" comment="libpostproc54 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631058" comment="libpostproc54-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348277" comment="libswresample-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348278" comment="libswresample2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631059" comment="libswresample2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348279" comment="libswscale-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348280" comment="libswscale4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631060" comment="libswscale4-32bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18248</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18248" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18248" ref_url="https://www.suse.com/security/cve/CVE-2017-18248" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004364.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2239-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00022.html" source="SUSE-SU"/>
    <description>
    The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18248/">CVE-2017-18248</cve>
	<bugzilla href="https://bugzilla.suse.com/1087018">SUSE bug 1087018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087072">SUSE bug 1087072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487749" comment="cups-ddk-2.2.7-3.11.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481064" comment="cups-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481065" comment="cups-client-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481066" comment="cups-config-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481067" comment="cups-devel-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481068" comment="libcups2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481069" comment="libcups2-32bit-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481070" comment="libcupscgi1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481071" comment="libcupsimage2-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481072" comment="libcupsmime1-2.2.7-3.11.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481073" comment="libcupsppdc1-2.2.7-3.11.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18249</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18249" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18249" ref_url="https://www.suse.com/security/cve/CVE-2017-18249" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004211.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1816-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1855-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005147.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005309.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1773-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00040.html" source="SUSE-SU"/>
    <description>
    The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service (race condition) or possibly have unspecified other impact via concurrent threads.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18249/">CVE-2017-18249</cve>
	<bugzilla href="https://bugzilla.suse.com/1087036">SUSE bug 1087036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18255</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18255" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18255" ref_url="https://www.suse.com/security/cve/CVE-2017-18255" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006817.html" source="SUSE-SU"/>
    <description>
    The perf_cpu_time_max_percent_handler function in kernel/events/core.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow) or possibly have unspecified other impact via a large value, as demonstrated by an incorrect sample-rate calculation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18255/">CVE-2017-18255</cve>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087813">SUSE bug 1087813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18258</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18258" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18258" ref_url="https://www.suse.com/security/cve/CVE-2017-18258" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004657.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00026.html" source="SUSE-SU"/>
    <description>
    The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18258/">CVE-2017-18258</cve>
	<bugzilla href="https://bugzilla.suse.com/1088279">SUSE bug 1088279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088601">SUSE bug 1088601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105166">SUSE bug 1105166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18261</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18261" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18261" ref_url="https://www.suse.com/security/cve/CVE-2017-18261" source="SUSE CVE"/>
    <description>
    The arch_timer_reg_read_stable macro in arch/arm64/include/asm/arch_timer.h in the Linux kernel before 4.13 allows local users to cause a denial of service (infinite recursion) by writing to a file under /sys/kernel/debug in certain circumstances, as demonstrated by a scenario involving debugfs, ftrace, PREEMPT_TRACER, and FUNCTION_GRAPH_TRACER.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18261/">CVE-2017-18261</cve>
	<bugzilla href="https://bugzilla.suse.com/1090225">SUSE bug 1090225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18266</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18266" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18266" ref_url="https://www.suse.com/security/cve/CVE-2017-18266" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004111.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1596-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00009.html" source="SUSE-SU"/>
    <description>
    The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by %s in this environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18266/">CVE-2017-18266</cve>
	<bugzilla href="https://bugzilla.suse.com/1093086">SUSE bug 1093086</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480960" comment="xdg-utils-20170508-3.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18267</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18267" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18267" ref_url="https://www.suse.com/security/cve/CVE-2017-18267" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2906-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2907-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030446.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3854-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TS7QPSEQIBQO7BALZOE3TN7IO7IMHK3Y/" source="SUSE-SU"/>
    <description>
    The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-21"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18267/">CVE-2017-18267</cve>
	<bugzilla href="https://bugzilla.suse.com/1092945">SUSE bug 1092945</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009658108" comment="libpoppler-cpp0-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658109" comment="libpoppler-devel-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658110" comment="libpoppler-glib-devel-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658111" comment="libpoppler-glib8-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658112" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658113" comment="poppler-tools-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658114" comment="typelib-1_0-Poppler-0_18-0.62.0-4.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009658125" comment="libpoppler-cpp0-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658126" comment="libpoppler-devel-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658127" comment="libpoppler-glib-devel-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658128" comment="libpoppler-glib8-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658130" comment="poppler-tools-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658131" comment="typelib-1_0-Poppler-0_18-0.62.0-4.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009658132" comment="libpoppler-cpp0-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658133" comment="libpoppler-devel-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658134" comment="libpoppler-glib-devel-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658135" comment="libpoppler-glib8-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658136" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658137" comment="poppler-tools-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658138" comment="typelib-1_0-Poppler-0_18-0.62.0-4.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009658159" comment="libpoppler-cpp0-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658160" comment="libpoppler-devel-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658161" comment="libpoppler-glib-devel-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658162" comment="libpoppler-glib8-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658163" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658164" comment="poppler-tools-0.62.0-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009658165" comment="typelib-1_0-Poppler-0_18-0.62.0-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18269</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18269" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18269" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18269" ref_url="https://www.suse.com/security/cve/CVE-2017-18269" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006352.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004156.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1562-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004285.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1600-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2159-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00000.html" source="SUSE-SU"/>
    <description>
    An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18269/">CVE-2017-18269</cve>
	<bugzilla href="https://bugzilla.suse.com/1094150">SUSE bug 1094150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118435">SUSE bug 1118435</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334045" comment="glibc is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334045" comment="glibc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335227" comment="glibc-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335238" comment="glibc-devel-static is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338796" comment="glibc-extra is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335228" comment="glibc-i18ndata is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335232" comment="glibc-info is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335229" comment="glibc-locale is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338797" comment="glibc-locale-base is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335233" comment="glibc-profile is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335230" comment="nscd is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334045" comment="glibc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335234" comment="glibc-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335227" comment="glibc-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335235" comment="glibc-devel-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335238" comment="glibc-devel-static is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338796" comment="glibc-extra is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335228" comment="glibc-i18ndata is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335232" comment="glibc-info is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335229" comment="glibc-locale is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335236" comment="glibc-locale-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338797" comment="glibc-locale-base is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335233" comment="glibc-profile is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335230" comment="nscd is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009674342" comment="glibc-2.26-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790357" comment="glibc-32bit-2.26-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674343" comment="glibc-devel-2.26-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790358" comment="glibc-extra-2.26-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674344" comment="glibc-i18ndata-2.26-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790359" comment="glibc-info-2.26-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674345" comment="glibc-locale-2.26-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782723" comment="glibc-locale-32bit-2.26-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481158" comment="glibc-locale-base-2.26-13.19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790360" comment="glibc-profile-2.26-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009674346" comment="nscd-2.26-13.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790361" comment="glibc-devel-32bit-2.26-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790362" comment="glibc-devel-static-2.26-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790363" comment="glibc-utils-2.26-13.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18270</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18270" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18270" ref_url="https://www.suse.com/security/cve/CVE-2017-18270" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwanted defaults or causing a denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-08-09"/>
	<updated date="2023-08-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18270/">CVE-2017-18270</cve>
	<bugzilla href="https://bugzilla.suse.com/1065999">SUSE bug 1065999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094186">SUSE bug 1094186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174993">SUSE bug 1174993</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718344" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18344</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18344" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18344" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18344" ref_url="https://www.suse.com/security/cve/CVE-2017-18344" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004414.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004427.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2344-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004449.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004455.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2391-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004459.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004468.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2416-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004470.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004485.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004487.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004529.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:3333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015911.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00061.html" source="SUSE-SU"/>
    <description>
    The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent-&gt;sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-08-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-18344/">CVE-2017-18344</cve>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102851">SUSE bug 1102851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103203">SUSE bug 1103203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103580">SUSE bug 1103580</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728819" comment="kernel-livepatch-4_12_14-197_4-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009730865" comment="kernel-livepatch-4_12_14-197_45-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009730866" comment="kernel-livepatch-4_12_14-197_48-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009730867" comment="kernel-livepatch-4_12_14-197_51-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009730868" comment="kernel-livepatch-4_12_14-197_56-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009730869" comment="kernel-livepatch-4_12_14-197_61-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009730870" comment="kernel-livepatch-4_12_14-197_64-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728830" comment="kernel-livepatch-4_12_14-197_7-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728840" comment="kernel-livepatch-4_12_14-197_10-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728842" comment="kernel-livepatch-4_12_14-197_15-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728843" comment="kernel-livepatch-4_12_14-197_18-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728844" comment="kernel-livepatch-4_12_14-197_21-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728845" comment="kernel-livepatch-4_12_14-197_26-default is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18551</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18551" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18551" ref_url="https://www.suse.com/security/cve/CVE-2017-18551" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006135.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005881.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005941.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2414-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005940.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2651-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192651-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2738-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192738-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2173-1" ref_url="https://lists.opensuse.org/opensuse-updates/2019-09/msg00133.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2181-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2c_smbus_xfer_emulated.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-18551/">CVE-2017-18551</cve>
	<bugzilla href="https://bugzilla.suse.com/1146163">SUSE bug 1146163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497048" comment="reiserfs-kmp-default-4.12.14-197.18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009508867" comment="kernel-default-extra-4.12.14-197.18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338032" comment="kernel-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333995" comment="kernel-source is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338032" comment="kernel-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338033" comment="kernel-default-base is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338034" comment="kernel-default-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335275" comment="kernel-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335276" comment="kernel-macros is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333995" comment="kernel-source is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338032" comment="kernel-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338033" comment="kernel-default-base is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338034" comment="kernel-default-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338036" comment="kernel-default-man is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338038" comment="reiserfs-kmp-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335275" comment="kernel-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335276" comment="kernel-macros is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333995" comment="kernel-source is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338032" comment="kernel-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338033" comment="kernel-default-base is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338034" comment="kernel-default-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338038" comment="reiserfs-kmp-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335275" comment="kernel-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335276" comment="kernel-macros is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333995" comment="kernel-source is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491665" comment="kernel-default-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491666" comment="kernel-default-base-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491667" comment="kernel-default-devel-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491668" comment="kernel-default-man-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491669" comment="kernel-devel-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491670" comment="kernel-macros-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491671" comment="kernel-zfcpdump-4.12.14-197.18.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009496221" comment="kernel-docs-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496222" comment="kernel-obs-build-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496223" comment="kernel-source-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496224" comment="kernel-syms-4.12.14-197.18.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009497407" comment="kernel-default-livepatch-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497408" comment="kernel-default-livepatch-devel-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497409" comment="kernel-livepatch-4_12_14-197_18-default-1-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009498018" comment="kernel-azure-4.12.14-8.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498019" comment="kernel-azure-base-4.12.14-8.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498020" comment="kernel-azure-devel-4.12.14-8.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498021" comment="kernel-devel-azure-4.12.14-8.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498022" comment="kernel-source-azure-4.12.14-8.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498023" comment="kernel-syms-azure-4.12.14-8.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009501557" comment="cluster-md-kmp-default-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009501558" comment="dlm-kmp-default-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009501559" comment="gfs2-kmp-default-4.12.14-197.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009501560" comment="ocfs2-kmp-default-4.12.14-197.18.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18552</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18552" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18552" ref_url="https://www.suse.com/security/cve/CVE-2017-18552" source="SUSE CVE"/>
    <description>
    An issue was discovered in net/rds/af_rds.c in the Linux kernel before 4.11. There is an out of bounds write and read in the function rds_recv_track_latency.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18552/">CVE-2017-18552</cve>
	<bugzilla href="https://bugzilla.suse.com/1146295">SUSE bug 1146295</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18594</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18594" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18594" ref_url="https://www.suse.com/security/cve/CVE-2017-18594" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2425-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2425-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2198-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html" source="SUSE-SU"/>
    <description>
    nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18594/">CVE-2017-18594</cve>
	<bugzilla href="https://bugzilla.suse.com/1148742">SUSE bug 1148742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490495" comment="nmap-7.70-3.12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497822" comment="nping-7.70-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18595</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18595" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18595" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18595" ref_url="https://www.suse.com/security/cve/CVE-2017-18595" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2651-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192651-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2706-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192706-1.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2879-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006110.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006131.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006143.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006257.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0093-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2307-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18595/">CVE-2017-18595</cve>
	<bugzilla href="https://bugzilla.suse.com/1149555">SUSE bug 1149555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497049" comment="reiserfs-kmp-default-4.12.14-197.21.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009508868" comment="kernel-default-extra-4.12.14-197.21.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338032" comment="kernel-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333995" comment="kernel-source is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338032" comment="kernel-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338033" comment="kernel-default-base is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338034" comment="kernel-default-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335275" comment="kernel-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335276" comment="kernel-macros is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333995" comment="kernel-source is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338032" comment="kernel-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338033" comment="kernel-default-base is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338034" comment="kernel-default-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338036" comment="kernel-default-man is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338038" comment="reiserfs-kmp-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335275" comment="kernel-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335276" comment="kernel-macros is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333995" comment="kernel-source is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338032" comment="kernel-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338033" comment="kernel-default-base is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338034" comment="kernel-default-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338038" comment="reiserfs-kmp-default is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335275" comment="kernel-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335276" comment="kernel-macros is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333995" comment="kernel-source is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491676" comment="kernel-default-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491677" comment="kernel-default-base-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491678" comment="kernel-default-devel-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491679" comment="kernel-default-man-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491680" comment="kernel-devel-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491681" comment="kernel-macros-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491682" comment="kernel-zfcpdump-4.12.14-197.21.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009496225" comment="kernel-docs-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496226" comment="kernel-obs-build-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496227" comment="kernel-source-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496228" comment="kernel-syms-4.12.14-197.21.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009497415" comment="kernel-default-livepatch-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497416" comment="kernel-default-livepatch-devel-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497417" comment="kernel-livepatch-4_12_14-197_21-default-1-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009498018" comment="kernel-azure-4.12.14-8.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498019" comment="kernel-azure-base-4.12.14-8.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498020" comment="kernel-azure-devel-4.12.14-8.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498021" comment="kernel-devel-azure-4.12.14-8.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498022" comment="kernel-source-azure-4.12.14-8.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009498023" comment="kernel-syms-azure-4.12.14-8.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009501561" comment="cluster-md-kmp-default-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009501562" comment="dlm-kmp-default-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009501563" comment="gfs2-kmp-default-4.12.14-197.21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009501564" comment="ocfs2-kmp-default-4.12.14-197.21.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18635</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18635" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18635" ref_url="https://www.suse.com/security/cve/CVE-2017-18635" source="SUSE CVE"/>
    <description>
    An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18635/">CVE-2017-18635</cve>
	<bugzilla href="https://bugzilla.suse.com/1152255">SUSE bug 1152255</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339376" comment="novnc is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18922</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18922" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18922" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18922" ref_url="https://www.suse.com/security/cve/CVE-2017-18922" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:1873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007136.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2167-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007241.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0960-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0978-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0988-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1025-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html" source="SUSE-SU"/>
    <description>
    It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18922/">CVE-2017-18922</cve>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497870" comment="libvncserver0-0.9.10-4.22.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009509076" comment="libvncclient0-0.9.10-4.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718926" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18926</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-18926" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18926" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-18926" ref_url="https://www.suse.com/security/cve/CVE-2017-18926" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:3350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007785.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1949-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IUV22LIOLBYBTTH7G7HNENHDQDYBB4WP/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1959-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UXCAHUNNGDFKLSCGKPLLGBYG4BM2FW4J/" source="SUSE-SU"/>
    <description>
    raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18926/">CVE-2017-18926</cve>
	<bugzilla href="https://bugzilla.suse.com/1178593">SUSE bug 1178593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178784">SUSE bug 1178784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178903">SUSE bug 1178903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183914">SUSE bug 1183914</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334054" comment="raptor is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009495505" comment="libraptor-devel-2.0.15-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495506" comment="libraptor2-0-2.0.15-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495507" comment="raptor-2.0.15-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201720004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-20004</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-20004" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-20004" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-20004" ref_url="https://www.suse.com/security/cve/CVE-2017-20004" source="SUSE CVE"/>
    <description>
    In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards can be used across threads with any types, allowing for memory safety issues through race conditions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-20004/">CVE-2017-20004</cve>
	<bugzilla href="https://bugzilla.suse.com/1184725">SUSE bug 1184725</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340808" comment="rust is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009340805" comment="cargo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340806" comment="clippy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340807" comment="rls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340808" comment="rust is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340809" comment="rust-analysis is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340811" comment="rust-src is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340813" comment="rust-std-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340814" comment="rustfmt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201720005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-20005</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-20005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-20005" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-20005" ref_url="https://www.suse.com/security/cve/CVE-2017-20005" source="SUSE CVE"/>
    <description>
    NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), when encountered by the autoindex module.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-20005/">CVE-2017-20005</cve>
	<bugzilla href="https://bugzilla.suse.com/1186921">SUSE bug 1186921</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009348227" comment="nginx is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009348227" comment="nginx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009477760" comment="nginx-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2350</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2350" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2350" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2350" ref_url="https://www.suse.com/security/cve/CVE-2017-2350" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2350/">CVE-2017-2350</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2354</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2354" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2354" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2354" ref_url="https://www.suse.com/security/cve/CVE-2017-2354" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2354/">CVE-2017-2354</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2355</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2355" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2355" ref_url="https://www.suse.com/security/cve/CVE-2017-2355" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2355/">CVE-2017-2355</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2356</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2356" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2356" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2356" ref_url="https://www.suse.com/security/cve/CVE-2017-2356" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2356/">CVE-2017-2356</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2362</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2362" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2362" ref_url="https://www.suse.com/security/cve/CVE-2017-2362" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2362/">CVE-2017-2362</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2363</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2363" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2363" ref_url="https://www.suse.com/security/cve/CVE-2017-2363" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2363/">CVE-2017-2363</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2364</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2364" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2364" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2364" ref_url="https://www.suse.com/security/cve/CVE-2017-2364" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2364/">CVE-2017-2364</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2365</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2365" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2365" ref_url="https://www.suse.com/security/cve/CVE-2017-2365" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2365/">CVE-2017-2365</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172366" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2366</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2366" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2366" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2366" ref_url="https://www.suse.com/security/cve/CVE-2017-2366" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2366/">CVE-2017-2366</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2369</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2369" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2369" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2369" ref_url="https://www.suse.com/security/cve/CVE-2017-2369" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2369/">CVE-2017-2369</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2371</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2371" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2371" ref_url="https://www.suse.com/security/cve/CVE-2017-2371" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-2371/">CVE-2017-2371</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2373</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2373" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2373" ref_url="https://www.suse.com/security/cve/CVE-2017-2373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2373/">CVE-2017-2373</cve>
	<bugzilla href="https://bugzilla.suse.com/1024749">SUSE bug 1024749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2496</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2496" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2496" ref_url="https://www.suse.com/security/cve/CVE-2017-2496" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2496/">CVE-2017-2496</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2510</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2510" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2510" ref_url="https://www.suse.com/security/cve/CVE-2017-2510" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with pageshow events.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-2510/">CVE-2017-2510</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2538</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2538" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2538" ref_url="https://www.suse.com/security/cve/CVE-2017-2538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2538/">CVE-2017-2538</cve>
	<bugzilla href="https://bugzilla.suse.com/1045460">SUSE bug 1045460</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2539</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2539" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2539" ref_url="https://www.suse.com/security/cve/CVE-2017-2539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2539/">CVE-2017-2539</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172579" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2579</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2579" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2579" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2579" ref_url="https://www.suse.com/security/cve/CVE-2017-2579" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005614.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1645-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005619.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1605-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00056.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2579/">CVE-2017-2579</cve>
	<bugzilla href="https://bugzilla.suse.com/1024287">SUSE bug 1024287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024288">SUSE bug 1024288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334519" comment="netpbm is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009494834" comment="libnetpbm-devel-10.80.1-3.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335726" comment="libnetpbm-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335724" comment="libnetpbm11 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334519" comment="netpbm is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009490213" comment="libnetpbm11-10.80.1-3.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490214" comment="netpbm-10.80.1-3.8.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172580" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2580</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2580" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2580" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2580" ref_url="https://www.suse.com/security/cve/CVE-2017-2580" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:14101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005614.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1645-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005619.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1605-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00056.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2580/">CVE-2017-2580</cve>
	<bugzilla href="https://bugzilla.suse.com/1024287">SUSE bug 1024287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024291">SUSE bug 1024291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334519" comment="netpbm is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009494834" comment="libnetpbm-devel-10.80.1-3.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335726" comment="libnetpbm-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335724" comment="libnetpbm11 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334519" comment="netpbm is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009490213" comment="libnetpbm11-10.80.1-3.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009490214" comment="netpbm-10.80.1-3.8.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2581</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2581" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2581" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2581" ref_url="https://www.suse.com/security/cve/CVE-2017-2581" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002944.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002953.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1698-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00105.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2581/">CVE-2017-2581</cve>
	<bugzilla href="https://bugzilla.suse.com/1024287">SUSE bug 1024287</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334519" comment="netpbm is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335726" comment="libnetpbm-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335724" comment="libnetpbm11 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334519" comment="netpbm is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2584</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2584" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2584" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2584" ref_url="https://www.suse.com/security/cve/CVE-2017-2584" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0575-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0456-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00000.html" source="SUSE-SU"/>
    <description>
    arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free) via a crafted application that leverages instruction emulation for fxrstor, fxsave, sgdt, and sidt.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2584/">CVE-2017-2584</cve>
	<bugzilla href="https://bugzilla.suse.com/1019851">SUSE bug 1019851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2586</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2586" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2586" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2586" ref_url="https://www.suse.com/security/cve/CVE-2017-2586" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002953.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1698-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00105.html" source="SUSE-SU"/>
    <description>
    A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2586/">CVE-2017-2586</cve>
	<bugzilla href="https://bugzilla.suse.com/1024287">SUSE bug 1024287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024292">SUSE bug 1024292</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334519" comment="netpbm is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335726" comment="libnetpbm-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335724" comment="libnetpbm11 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334519" comment="netpbm is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2587</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2587" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2587" ref_url="https://www.suse.com/security/cve/CVE-2017-2587" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002953.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1698-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00105.html" source="SUSE-SU"/>
    <description>
    A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2587/">CVE-2017-2587</cve>
	<bugzilla href="https://bugzilla.suse.com/1024287">SUSE bug 1024287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024294">SUSE bug 1024294</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334519" comment="netpbm is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335726" comment="libnetpbm-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335724" comment="libnetpbm11 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334519" comment="netpbm is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2615</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2615" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2615" ref_url="https://www.suse.com/security/cve/CVE-2017-2615" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0571-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-2615/">CVE-2017-2615</cve>
	<bugzilla href="https://bugzilla.suse.com/1023004">SUSE bug 1023004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2616</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2616" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2616" ref_url="https://www.suse.com/security/cve/CVE-2017-2616" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0555-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0866-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0589-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00002.html" source="SUSE-SU"/>
    <description>
    A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2616/">CVE-2017-2616</cve>
	<bugzilla href="https://bugzilla.suse.com/1023041">SUSE bug 1023041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123789">SUSE bug 1123789</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488452" comment="uuidd-2.33.1-2.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481268" comment="libblkid-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481269" comment="libblkid-devel-static-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481270" comment="libblkid1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481271" comment="libblkid1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481272" comment="libfdisk-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481273" comment="libfdisk1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481274" comment="libmount-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481275" comment="libmount1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481276" comment="libmount1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481277" comment="libsmartcols-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481278" comment="libsmartcols1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481279" comment="libuuid-devel-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481280" comment="libuuid-devel-static-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481281" comment="libuuid1-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481282" comment="libuuid1-32bit-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481283" comment="util-linux-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481284" comment="util-linux-lang-2.33.1-2.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481285" comment="util-linux-systemd-2.33.1-2.14 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2619</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2619" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2619" ref_url="https://www.suse.com/security/cve/CVE-2017-2619" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0858-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0859-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0862-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0944-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00009.html" source="SUSE-SU"/>
    <description>
    Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2619/">CVE-2017-2619</cve>
	<bugzilla href="https://bugzilla.suse.com/1027147">SUSE bug 1027147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036283">SUSE bug 1036283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054017">SUSE bug 1054017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2620</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2620" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2620" ref_url="https://www.suse.com/security/cve/CVE-2017-2620" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0571-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0718-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0665-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.9/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2620/">CVE-2017-2620</cve>
	<bugzilla href="https://bugzilla.suse.com/1024834">SUSE bug 1024834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024972">SUSE bug 1024972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2624</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2624" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2624" ref_url="https://www.suse.com/security/cve/CVE-2017-2624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1675-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002980.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1610-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00070.html" source="SUSE-SU"/>
    <description>
    It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is seen, this causes a time difference between a valid and invalid byte, which could allow an efficient brute force attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2624/">CVE-2017-2624</cve>
	<bugzilla href="https://bugzilla.suse.com/1025029">SUSE bug 1025029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1025639">SUSE bug 1025639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035283">SUSE bug 1035283</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487792" comment="xorg-x11-server-sdk-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489170" comment="xorg-x11-server-wayland-1.20.3-12.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334055" comment="xorg-x11 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335729" comment="xorg-x11-essentials is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334106" comment="xorg-x11-server is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336018" comment="xorg-x11-server-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336019" comment="xorg-x11-server-sdk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481676" comment="xorg-x11-server-1.20.3-12.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481677" comment="xorg-x11-server-extra-1.20.3-12.29 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2625</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2625" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2625" ref_url="https://www.suse.com/security/cve/CVE-2017-2625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1862-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003696.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1802-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00031.html" source="SUSE-SU"/>
    <description>
    It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2625/">CVE-2017-2625</cve>
	<bugzilla href="https://bugzilla.suse.com/1025046">SUSE bug 1025046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1025068">SUSE bug 1025068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1025639">SUSE bug 1025639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123802">SUSE bug 1123802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/815650">SUSE bug 815650</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480412" comment="libXdmcp-devel-1.1.2-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480413" comment="libXdmcp6-1.1.2-1.23 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2626</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2626" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2626" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2626" ref_url="https://www.suse.com/security/cve/CVE-2017-2626" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003695.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1801-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00030.html" source="SUSE-SU"/>
    <description>
    It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-2626/">CVE-2017-2626</cve>
	<bugzilla href="https://bugzilla.suse.com/1025068">SUSE bug 1025068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1025639">SUSE bug 1025639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048274">SUSE bug 1048274</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123800">SUSE bug 1123800</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482742" comment="libICE6-32bit-1.0.9-1.25 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480360" comment="libICE-devel-1.0.9-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480361" comment="libICE6-1.0.9-1.25 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2629</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2629" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2629" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2629" ref_url="https://www.suse.com/security/cve/CVE-2017-2629" source="SUSE CVE"/>
    <description>
    curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's certificate's validity in the code that checks for a test success or failure. It ends up always thinking there's valid proof, even when there is none or if the server doesn't support the TLS extension in question. This could lead to users not detecting when a server's certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-2629/">CVE-2017-2629</cve>
	<bugzilla href="https://bugzilla.suse.com/1025379">SUSE bug 1025379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042181">SUSE bug 1042181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481074" comment="curl-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481075" comment="libcurl-devel-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481076" comment="libcurl4-7.60.0-3.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481077" comment="libcurl4-32bit-7.60.0-3.17.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2630</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2630" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2630" ref_url="https://www.suse.com/security/cve/CVE-2017-2630" source="SUSE CVE"/>
    <description>
    A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2630/">CVE-2017-2630</cve>
	<bugzilla href="https://bugzilla.suse.com/1025396">SUSE bug 1025396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2633</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2633" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2633" ref_url="https://www.suse.com/security/cve/CVE-2017-2633" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00022.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2633/">CVE-2017-2633</cve>
	<bugzilla href="https://bugzilla.suse.com/1026612">SUSE bug 1026612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1026636">SUSE bug 1026636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074701">SUSE bug 1074701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333988" comment="qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335414" comment="qemu-arm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336533" comment="qemu-audio-alsa is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336534" comment="qemu-audio-oss is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336535" comment="qemu-audio-pa is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335210" comment="qemu-block-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335211" comment="qemu-block-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335248" comment="qemu-block-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335212" comment="qemu-block-ssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335213" comment="qemu-guest-agent is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335214" comment="qemu-ipxe is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335243" comment="qemu-kvm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335215" comment="qemu-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335244" comment="qemu-seabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335245" comment="qemu-sgabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335217" comment="qemu-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336537" comment="qemu-ui-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336538" comment="qemu-ui-gtk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335218" comment="qemu-vgabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335246" comment="qemu-x86 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2635</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2635" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2635" ref_url="https://www.suse.com/security/cve/CVE-2017-2635" source="SUSE CVE"/>
    <description>
    A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2635/">CVE-2017-2635</cve>
	<bugzilla href="https://bugzilla.suse.com/1027075">SUSE bug 1027075</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481528" comment="libvirt-libs-5.1.0-6.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488366" comment="libvirt-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488367" comment="libvirt-admin-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488368" comment="libvirt-bash-completion-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488369" comment="libvirt-client-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488370" comment="libvirt-daemon-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488371" comment="libvirt-daemon-config-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488372" comment="libvirt-daemon-config-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488373" comment="libvirt-daemon-driver-interface-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488374" comment="libvirt-daemon-driver-libxl-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488375" comment="libvirt-daemon-driver-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488376" comment="libvirt-daemon-driver-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488377" comment="libvirt-daemon-driver-nodedev-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488378" comment="libvirt-daemon-driver-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488379" comment="libvirt-daemon-driver-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488380" comment="libvirt-daemon-driver-secret-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488381" comment="libvirt-daemon-driver-storage-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488382" comment="libvirt-daemon-driver-storage-core-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488383" comment="libvirt-daemon-driver-storage-disk-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488384" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488385" comment="libvirt-daemon-driver-storage-logical-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488386" comment="libvirt-daemon-driver-storage-mpath-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488387" comment="libvirt-daemon-driver-storage-rbd-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488388" comment="libvirt-daemon-driver-storage-scsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488389" comment="libvirt-daemon-hooks-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488390" comment="libvirt-daemon-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488391" comment="libvirt-daemon-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488392" comment="libvirt-daemon-xen-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488393" comment="libvirt-devel-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488394" comment="libvirt-doc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488395" comment="libvirt-lock-sanlock-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488396" comment="libvirt-nss-5.1.0-6.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2640</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2640" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2640" ref_url="https://www.suse.com/security/cve/CVE-2017-2640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:2235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004382.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0892-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00115.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0925-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0973-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00012.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2640/">CVE-2017-2640</cve>
	<bugzilla href="https://bugzilla.suse.com/1028835">SUSE bug 1028835</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2671</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2671" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2671" ref_url="https://www.suse.com/security/cve/CVE-2017-2671" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2342-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00016.html" source="SUSE-SU"/>
    <description>
    The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2671/">CVE-2017-2671</cve>
	<bugzilla href="https://bugzilla.suse.com/1027179">SUSE bug 1027179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1031003">SUSE bug 1031003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2820</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2820" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2820" ref_url="https://www.suse.com/security/cve/CVE-2017-2820" source="SUSE CVE"/>
    <description>
    An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially crafted PDF file can lead to an integer overflow causing out of bounds memory overwrite on the heap resulting in potential arbitrary code execution. To trigger this vulnerability, a victim must open the malicious PDF in an application using this library.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2820/">CVE-2017-2820</cve>
	<bugzilla href="https://bugzilla.suse.com/1047949">SUSE bug 1047949</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338790" comment="libpoppler-cpp0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337408" comment="libpoppler-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337409" comment="libpoppler-glib-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337738" comment="libpoppler-glib8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338791" comment="libpoppler73 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337407" comment="poppler-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338792" comment="typelib-1_0-Poppler-0_18 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2834</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2834" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2834" ref_url="https://www.suse.com/security/cve/CVE-2017-2834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00006.html" source="SUSE-SU"/>
    <description>
    An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2834/">CVE-2017-2834</cve>
	<bugzilla href="https://bugzilla.suse.com/1050714">SUSE bug 1050714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489056" comment="freerdp-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489057" comment="freerdp-devel-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489058" comment="libfreerdp2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489059" comment="libwinpr2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489060" comment="winpr2-devel-2.0.0~rc4-8.4 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2835</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2835" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2835" ref_url="https://www.suse.com/security/cve/CVE-2017-2835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00006.html" source="SUSE-SU"/>
    <description>
    An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2835/">CVE-2017-2835</cve>
	<bugzilla href="https://bugzilla.suse.com/1050712">SUSE bug 1050712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489056" comment="freerdp-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489057" comment="freerdp-devel-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489058" comment="libfreerdp2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489059" comment="libwinpr2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489060" comment="winpr2-devel-2.0.0~rc4-8.4 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2836</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2836" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2836" ref_url="https://www.suse.com/security/cve/CVE-2017-2836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00006.html" source="SUSE-SU"/>
    <description>
    An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2836/">CVE-2017-2836</cve>
	<bugzilla href="https://bugzilla.suse.com/1050699">SUSE bug 1050699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489056" comment="freerdp-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489057" comment="freerdp-devel-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489058" comment="libfreerdp2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489059" comment="libwinpr2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489060" comment="winpr2-devel-2.0.0~rc4-8.4 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2837</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2837" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2837" ref_url="https://www.suse.com/security/cve/CVE-2017-2837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00006.html" source="SUSE-SU"/>
    <description>
    An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2837/">CVE-2017-2837</cve>
	<bugzilla href="https://bugzilla.suse.com/1050704">SUSE bug 1050704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050708">SUSE bug 1050708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489056" comment="freerdp-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489057" comment="freerdp-devel-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489058" comment="libfreerdp2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489059" comment="libwinpr2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489060" comment="winpr2-devel-2.0.0~rc4-8.4 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2838</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2838" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2838" ref_url="https://www.suse.com/security/cve/CVE-2017-2838" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00006.html" source="SUSE-SU"/>
    <description>
    An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2838/">CVE-2017-2838</cve>
	<bugzilla href="https://bugzilla.suse.com/1050708">SUSE bug 1050708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489056" comment="freerdp-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489057" comment="freerdp-devel-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489058" comment="libfreerdp2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489059" comment="libwinpr2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489060" comment="winpr2-devel-2.0.0~rc4-8.4 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2839</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2839" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2839" ref_url="https://www.suse.com/security/cve/CVE-2017-2839" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00006.html" source="SUSE-SU"/>
    <description>
    An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2839/">CVE-2017-2839</cve>
	<bugzilla href="https://bugzilla.suse.com/1050711">SUSE bug 1050711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489056" comment="freerdp-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489057" comment="freerdp-devel-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489058" comment="libfreerdp2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489059" comment="libwinpr2-2.0.0~rc4-8.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489060" comment="winpr2-devel-2.0.0~rc4-8.4 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2862</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2862" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2862" ref_url="https://www.suse.com/security/cve/CVE-2017-2862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004484.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00021.html" source="SUSE-SU"/>
    <description>
    An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2862/">CVE-2017-2862</cve>
	<bugzilla href="https://bugzilla.suse.com/1048289">SUSE bug 1048289</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480251" comment="gdk-pixbuf-devel-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480252" comment="gdk-pixbuf-lang-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480253" comment="gdk-pixbuf-query-loaders-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480254" comment="gdk-pixbuf-thumbnailer-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480255" comment="libgdk_pixbuf-2_0-0-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480256" comment="typelib-1_0-GdkPixbuf-2_0-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482688" comment="gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482689" comment="libgdk_pixbuf-2_0-0-32bit-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2870</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2870" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2870" ref_url="https://www.suse.com/security/cve/CVE-2017-2870" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004484.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00021.html" source="SUSE-SU"/>
    <description>
    An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-2870/">CVE-2017-2870</cve>
	<bugzilla href="https://bugzilla.suse.com/1048289">SUSE bug 1048289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048544">SUSE bug 1048544</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333994" comment="gdk-pixbuf is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335274" comment="gdk-pixbuf-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335266" comment="gdk-pixbuf-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335267" comment="gdk-pixbuf-query-loaders is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335272" comment="gdk-pixbuf-query-loaders-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340525" comment="gdk-pixbuf-thumbnailer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335268" comment="libgdk_pixbuf-2_0-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335273" comment="libgdk_pixbuf-2_0-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335269" comment="typelib-1_0-GdkPixbuf-2_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335270" comment="gtk2-data is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335271" comment="gtk2-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335262" comment="gtk2-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335263" comment="gtk2-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335260" comment="gtk2-tools-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335264" comment="libgtk-2_0-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335261" comment="libgtk-2_0-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335265" comment="typelib-1_0-Gtk-2_0 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335274" comment="gdk-pixbuf-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335266" comment="gdk-pixbuf-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335267" comment="gdk-pixbuf-query-loaders is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335272" comment="gdk-pixbuf-query-loaders-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340525" comment="gdk-pixbuf-thumbnailer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335268" comment="libgdk_pixbuf-2_0-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335273" comment="libgdk_pixbuf-2_0-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335269" comment="typelib-1_0-GdkPixbuf-2_0 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480251" comment="gdk-pixbuf-devel-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480252" comment="gdk-pixbuf-lang-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480253" comment="gdk-pixbuf-query-loaders-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480254" comment="gdk-pixbuf-thumbnailer-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480255" comment="libgdk_pixbuf-2_0-0-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480256" comment="typelib-1_0-GdkPixbuf-2_0-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482688" comment="gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482689" comment="libgdk_pixbuf-2_0-0-32bit-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2885</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2885" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2885" ref_url="https://www.suse.com/security/cve/CVE-2017-2885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2129-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2130-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004374.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2204-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-January/005020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00042.html" source="SUSE-SU"/>
    <description>
    An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2885/">CVE-2017-2885</cve>
	<bugzilla href="https://bugzilla.suse.com/1052916">SUSE bug 1052916</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481487" comment="libsoup-2_4-1-2.62.2-3.3.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481488" comment="libsoup-lang-2.62.2-3.3.32 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486883" comment="libsoup-devel-2.62.2-3.3.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486884" comment="typelib-1_0-Soup-2_4-2.62.2-3.3.32 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2888</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-2888" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2888" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-2888" ref_url="https://www.suse.com/security/cve/CVE-2017-2888" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:2893-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00111.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2895-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-10/msg00113.html" source="SUSE-SU"/>
    <description>
    An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2888/">CVE-2017-2888</cve>
	<bugzilla href="https://bugzilla.suse.com/1062777">SUSE bug 1062777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1062784">SUSE bug 1062784</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486655" comment="libSDL2-2_0-0-2.0.8-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486656" comment="libSDL2-devel-2.0.8-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3135</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3135" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3135" ref_url="https://www.suse.com/security/cve/CVE-2017-3135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002672.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002674.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0620-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00012.html" source="SUSE-SU"/>
    <description>
    Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -&gt; 9.9.9-S7, 9.9.3 -&gt; 9.9.9-P5, 9.9.10b1, 9.10.0 -&gt; 9.10.4-P5, 9.10.5b1, 9.11.0 -&gt; 9.11.0-P2, 9.11.1b1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3135/">CVE-2017-3135</cve>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3136</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3136" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3136" ref_url="https://www.suse.com/security/cve/CVE-2017-3136" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:518-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007554.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007555.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:521-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007562.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007564.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007565.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007566.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007567.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007568.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007569.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007570.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:546-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007572.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007598.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007599.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007600.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007735.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007736.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007737.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007980.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007981.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007982.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:777-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007983.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007984.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007985.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:780-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007987.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007988.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007989.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:785-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007991.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007992.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:788-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007994.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:789-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007995.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007996.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007997.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007999.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:806-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:808-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:814-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008039.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008040.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:842-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008050.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008053.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:848-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008057.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009926.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:81-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010104.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007588.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007589.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007966.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007967.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007968.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2020:117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008059.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0999-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html" source="SUSE-SU"/>
    <description>
    A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -&gt; 9.8.8-P1, 9.9.0 -&gt; 9.9.9-P6, 9.9.10b1-&gt;9.9.10rc1, 9.10.0 -&gt; 9.10.4-P6, 9.10.5b1-&gt;9.10.5rc1, 9.11.0 -&gt; 9.11.0-P3, 9.11.1b1-&gt;9.11.1rc1, 9.9.3-S1 -&gt; 9.9.9-S8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3136/">CVE-2017-3136</cve>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033461">SUSE bug 1033461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081545">SUSE bug 1081545</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009492617" comment="bind-devel-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492618" comment="bind-utils-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492619" comment="libbind9-1600-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492620" comment="libdns1605-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492621" comment="libirs-devel-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492622" comment="libirs1601-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492623" comment="libisc1606-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492624" comment="libisccc1600-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492625" comment="libisccfg1600-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492626" comment="libns1604-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492627" comment="python3-bind-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492628" comment="sysuser-shadow-2.0-4.2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492629" comment="sysuser-tools-2.0-4.2.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009499467" comment="bind-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009499468" comment="bind-chrootenv-9.16.6-12.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009499469" comment="bind-doc-9.16.6-12.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3137</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3137" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3137" ref_url="https://www.suse.com/security/cve/CVE-2017-3137" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0999-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002797.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1027-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00022.html" source="SUSE-SU"/>
    <description>
    Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND 9.9.9-P6, 9.9.10b1-&gt;9.9.10rc1, 9.10.4-P6, 9.10.5b1-&gt;9.10.5rc1, 9.11.0-P3, 9.11.1b1-&gt;9.11.1rc1, and 9.9.9-S8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3137/">CVE-2017-3137</cve>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033461">SUSE bug 1033461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033467">SUSE bug 1033467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034162">SUSE bug 1034162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076118">SUSE bug 1076118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081545">SUSE bug 1081545</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3138</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3138" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3138" ref_url="https://www.suse.com/security/cve/CVE-2017-3138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0998-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0999-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1000-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002797.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1063-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00022.html" source="SUSE-SU"/>
    <description>
    named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of named can be caused to exit with a REQUIRE assertion failure if they are sent a null command string. Affects BIND 9.9.9-&gt;9.9.9-P7, 9.9.10b1-&gt;9.9.10rc2, 9.10.4-&gt;9.10.4-P7, 9.10.5b1-&gt;9.10.5rc2, 9.11.0-&gt;9.11.0-P4, 9.11.1b1-&gt;9.11.1rc2, 9.9.9-S1-&gt;9.9.9-S9.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3138/">CVE-2017-3138</cve>
	<bugzilla href="https://bugzilla.suse.com/1018700">SUSE bug 1018700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018701">SUSE bug 1018701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1018702">SUSE bug 1018702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033461">SUSE bug 1033461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033466">SUSE bug 1033466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033468">SUSE bug 1033468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3140</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3140" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3140" ref_url="https://www.suse.com/security/cve/CVE-2017-3140" source="SUSE CVE"/>
    <description>
    If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0-&gt;9.11.1, 9.9.10-S1, 9.10.5-S1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-3140/">CVE-2017-3140</cve>
	<bugzilla href="https://bugzilla.suse.com/1044225">SUSE bug 1044225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044226">SUSE bug 1044226</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3141</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3141" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3141" ref_url="https://www.suse.com/security/cve/CVE-2017-3141" source="SUSE CVE"/>
    <description>
    The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2-&gt;9.2.9, 9.3.2-P1-&gt;9.3.6, 9.4.0-&gt;9.8.8, 9.9.0-&gt;9.9.10, 9.10.0-&gt;9.10.5, 9.11.0-&gt;9.11.1, 9.9.3-S1-&gt;9.9.10-S1, 9.10.5-S1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3141/">CVE-2017-3141</cve>
	<bugzilla href="https://bugzilla.suse.com/1044225">SUSE bug 1044225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044226">SUSE bug 1044226</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3142</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3142" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3142" ref_url="https://www.suse.com/security/cve/CVE-2017-3142" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1737-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="TID7021041" ref_url="https://www.suse.com/support/kb/doc/?id=7021041" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1809-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00007.html" source="SUSE-SU"/>
    <description>
    An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0-&gt;9.8.8, 9.9.0-&gt;9.9.10-P1, 9.10.0-&gt;9.10.5-P1, 9.11.0-&gt;9.11.1-P1, 9.9.3-S1-&gt;9.9.10-S2, 9.10.5-S1-&gt;9.10.5-S2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3142/">CVE-2017-3142</cve>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046554">SUSE bug 1046554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046555">SUSE bug 1046555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3143</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3143" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3143" ref_url="https://www.suse.com/security/cve/CVE-2017-3143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1737-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="TID7021041" ref_url="https://www.suse.com/support/kb/doc/?id=7021041" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1809-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00007.html" source="SUSE-SU"/>
    <description>
    An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0-&gt;9.8.8, 9.9.0-&gt;9.9.10-P1, 9.10.0-&gt;9.10.5-P1, 9.11.0-&gt;9.11.1-P1, 9.9.3-S1-&gt;9.9.10-S2, 9.10.5-S1-&gt;9.10.5-S2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-3143/">CVE-2017-3143</cve>
	<bugzilla href="https://bugzilla.suse.com/1024130">SUSE bug 1024130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046554">SUSE bug 1046554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046555">SUSE bug 1046555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3144</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3144" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3144" ref_url="https://www.suse.com/security/cve/CVE-2017-3144" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003731.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003752.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0537-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00101.html" source="SUSE-SU"/>
    <description>
    A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-3144/">CVE-2017-3144</cve>
	<bugzilla href="https://bugzilla.suse.com/1076118">SUSE bug 1076118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076119">SUSE bug 1076119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3145</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3145" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3145" ref_url="https://www.suse.com/security/cve/CVE-2017-3145" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0362-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00105.html" source="SUSE-SU"/>
    <description>
    BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3145/">CVE-2017-3145</cve>
	<bugzilla href="https://bugzilla.suse.com/1076118">SUSE bug 1076118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101131">SUSE bug 1101131</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177790">SUSE bug 1177790</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488311" comment="bind-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488312" comment="bind-chrootenv-9.11.2-12.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488313" comment="bind-doc-9.11.2-12.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3157</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3157" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3157" ref_url="https://www.suse.com/security/cve/CVE-2017-3157" source="SUSE CVE"/>
    <description>
    By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker by, e.g., using hidden sections to store the information, tricking the user into saving the document and convincing the user to send the document back to the attacker. The vulnerability is mitigated by the need for the attacker to know the precise file path in the target system, and the need to trick the user into saving the document and sending it back.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3157/">CVE-2017-3157</cve>
	<bugzilla href="https://bugzilla.suse.com/1026640">SUSE bug 1026640</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3231</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3231" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3231" ref_url="https://www.suse.com/security/cve/CVE-2017-3231" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3231/">CVE-2017-3231</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3238</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3238" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3238" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3238" ref_url="https://www.suse.com/security/cve/CVE-2017-3238" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3238/">CVE-2017-3238</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020882">SUSE bug 1020882</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3241</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3241" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3241" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3241" ref_url="https://www.suse.com/security/cve/CVE-2017-3241" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3241/">CVE-2017-3241</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163365">SUSE bug 1163365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3243</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3243" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3243" ref_url="https://www.suse.com/security/cve/CVE-2017-3243" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3243/">CVE-2017-3243</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020891">SUSE bug 1020891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3244</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3244" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3244" ref_url="https://www.suse.com/security/cve/CVE-2017-3244" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3244/">CVE-2017-3244</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020877">SUSE bug 1020877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3252</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3252" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3252" ref_url="https://www.suse.com/security/cve/CVE-2017-3252" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.8 (Integrity impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.8/CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-3252/">CVE-2017-3252</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3253</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3253" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3253" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3253" ref_url="https://www.suse.com/security/cve/CVE-2017-3253" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 7.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3253/">CVE-2017-3253</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173257" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3257</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3257" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3257" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3257" ref_url="https://www.suse.com/security/cve/CVE-2017-3257" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3257/">CVE-2017-3257</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020878">SUSE bug 1020878</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3258</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3258" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3258" ref_url="https://www.suse.com/security/cve/CVE-2017-3258" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3258/">CVE-2017-3258</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020875">SUSE bug 1020875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3259</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3259" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3259" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3259" ref_url="https://www.suse.com/security/cve/CVE-2017-3259" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 3.7 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3259/">CVE-2017-3259</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173260" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3260</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3260" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3260" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3260" ref_url="https://www.suse.com/security/cve/CVE-2017-3260" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3260/">CVE-2017-3260</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3261</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3261" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3261" ref_url="https://www.suse.com/security/cve/CVE-2017-3261" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3261/">CVE-2017-3261</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3265</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3265" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3265" ref_url="https://www.suse.com/security/cve/CVE-2017-3265" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3265/">CVE-2017-3265</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020885">SUSE bug 1020885</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3272</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3272" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3272" ref_url="https://www.suse.com/security/cve/CVE-2017-3272" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3272/">CVE-2017-3272</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3289</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3289" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3289" ref_url="https://www.suse.com/security/cve/CVE-2017-3289" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0346-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0460-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0490-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0374-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0513-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1429-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00073.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-20"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3289/">CVE-2017-3289</cve>
	<bugzilla href="https://bugzilla.suse.com/1020905">SUSE bug 1020905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024218">SUSE bug 1024218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163365">SUSE bug 1163365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3291</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3291" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3291" ref_url="https://www.suse.com/security/cve/CVE-2017-3291" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3291/">CVE-2017-3291</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020884">SUSE bug 1020884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998309">SUSE bug 998309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3302</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3302" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3302" ref_url="https://www.suse.com/security/cve/CVE-2017-3302" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1315-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3302/">CVE-2017-3302</cve>
	<bugzilla href="https://bugzilla.suse.com/1022428">SUSE bug 1022428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034850">SUSE bug 1034850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034911">SUSE bug 1034911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3308</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3308" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3308" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3308" ref_url="https://www.suse.com/security/cve/CVE-2017-3308" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3308/">CVE-2017-3308</cve>
	<bugzilla href="https://bugzilla.suse.com/1034850">SUSE bug 1034850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048715">SUSE bug 1048715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3309</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3309" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3309" ref_url="https://www.suse.com/security/cve/CVE-2017-3309" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3309/">CVE-2017-3309</cve>
	<bugzilla href="https://bugzilla.suse.com/1034850">SUSE bug 1034850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048715">SUSE bug 1048715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3312</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3312" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3312" ref_url="https://www.suse.com/security/cve/CVE-2017-3312" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3312/">CVE-2017-3312</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020873">SUSE bug 1020873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998309">SUSE bug 998309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3313</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3313" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3313" ref_url="https://www.suse.com/security/cve/CVE-2017-3313" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1311-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1315-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1475-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3313/">CVE-2017-3313</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020890">SUSE bug 1020890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034911">SUSE bug 1034911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3317</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3317" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3317" ref_url="https://www.suse.com/security/cve/CVE-2017-3317" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3317/">CVE-2017-3317</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020894">SUSE bug 1020894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3318</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3318" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3318" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3318" ref_url="https://www.suse.com/security/cve/CVE-2017-3318" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0479-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0618-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3318/">CVE-2017-3318</cve>
	<bugzilla href="https://bugzilla.suse.com/1020868">SUSE bug 1020868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020896">SUSE bug 1020896</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3453</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3453" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3453" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3453" ref_url="https://www.suse.com/security/cve/CVE-2017-3453" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3453/">CVE-2017-3453</cve>
	<bugzilla href="https://bugzilla.suse.com/1034850">SUSE bug 1034850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048715">SUSE bug 1048715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3456</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3456" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3456" ref_url="https://www.suse.com/security/cve/CVE-2017-3456" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3456/">CVE-2017-3456</cve>
	<bugzilla href="https://bugzilla.suse.com/1034850">SUSE bug 1034850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048715">SUSE bug 1048715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3464</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3464" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3464" ref_url="https://www.suse.com/security/cve/CVE-2017-3464" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1137-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3464/">CVE-2017-3464</cve>
	<bugzilla href="https://bugzilla.suse.com/1034850">SUSE bug 1034850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1048715">SUSE bug 1048715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3509</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3509" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3509" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3509" ref_url="https://www.suse.com/security/cve/CVE-2017-3509" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1429-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3509/">CVE-2017-3509</cve>
	<bugzilla href="https://bugzilla.suse.com/1034849">SUSE bug 1034849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3511</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3511" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3511" ref_url="https://www.suse.com/security/cve/CVE-2017-3511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1429-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3511/">CVE-2017-3511</cve>
	<bugzilla href="https://bugzilla.suse.com/1034849">SUSE bug 1034849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3512</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3512" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3512" ref_url="https://www.suse.com/security/cve/CVE-2017-3512" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1429-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3512/">CVE-2017-3512</cve>
	<bugzilla href="https://bugzilla.suse.com/1034849">SUSE bug 1034849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3514</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3514" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3514" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3514" ref_url="https://www.suse.com/security/cve/CVE-2017-3514" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1429-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3514/">CVE-2017-3514</cve>
	<bugzilla href="https://bugzilla.suse.com/1034849">SUSE bug 1034849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3526</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3526" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3526" ref_url="https://www.suse.com/security/cve/CVE-2017-3526" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1429-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3526/">CVE-2017-3526</cve>
	<bugzilla href="https://bugzilla.suse.com/1034849">SUSE bug 1034849</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3533</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3533" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3533" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3533" ref_url="https://www.suse.com/security/cve/CVE-2017-3533" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1429-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via FTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3533/">CVE-2017-3533</cve>
	<bugzilla href="https://bugzilla.suse.com/1034849">SUSE bug 1034849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3539</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3539" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3539" ref_url="https://www.suse.com/security/cve/CVE-2017-3539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1429-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3539/">CVE-2017-3539</cve>
	<bugzilla href="https://bugzilla.suse.com/1005522">SUSE bug 1005522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1034849">SUSE bug 1034849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3544</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3544" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3544" ref_url="https://www.suse.com/security/cve/CVE-2017-3544" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1384-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002911.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1386-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1387-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002914.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1400-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1444-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1445-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1429-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3544/">CVE-2017-3544</cve>
	<bugzilla href="https://bugzilla.suse.com/1034849">SUSE bug 1034849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038505">SUSE bug 1038505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488043" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488044" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488045" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488046" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488047" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488048" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488049" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488050" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3636</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3636" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3636" ref_url="https://www.suse.com/security/cve/CVE-2017-3636" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003596.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2011-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-3636/">CVE-2017-3636</cve>
	<bugzilla href="https://bugzilla.suse.com/1049399">SUSE bug 1049399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049422">SUSE bug 1049422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054591">SUSE bug 1054591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3641</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3641" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3641" ref_url="https://www.suse.com/security/cve/CVE-2017-3641" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003596.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2011-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3641/">CVE-2017-3641</cve>
	<bugzilla href="https://bugzilla.suse.com/1049404">SUSE bug 1049404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049422">SUSE bug 1049422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054591">SUSE bug 1054591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173653" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3653</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3653" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3653" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3653" ref_url="https://www.suse.com/security/cve/CVE-2017-3653" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0079-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003596.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2011-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0088-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3653/">CVE-2017-3653</cve>
	<bugzilla href="https://bugzilla.suse.com/1049417">SUSE bug 1049417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049422">SUSE bug 1049422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054591">SUSE bug 1054591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076506">SUSE bug 1076506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3731</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3731" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3731" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3731" ref_url="https://www.suse.com/security/cve/CVE-2017-3731" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002642.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0481-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0487-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0941-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2868-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3731/">CVE-2017-3731</cve>
	<bugzilla href="https://bugzilla.suse.com/1021641">SUSE bug 1021641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022085">SUSE bug 1022085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064118">SUSE bug 1064118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064119">SUSE bug 1064119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3732</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3732" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3732" ref_url="https://www.suse.com/security/cve/CVE-2017-3732" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0431-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002638.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002746.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004658.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0481-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0527-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0941-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2011-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html" source="SUSE-SU"/>
    <description>
    There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3732/">CVE-2017-3732</cve>
	<bugzilla href="https://bugzilla.suse.com/1021641">SUSE bug 1021641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022086">SUSE bug 1022086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049418">SUSE bug 1049418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049421">SUSE bug 1049421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1049422">SUSE bug 1049422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066242">SUSE bug 1066242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071906">SUSE bug 1071906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957814">SUSE bug 957814</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782659" comment="java-1_8_0-ibm-1.8.0_sr5.20-3.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782660" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782661" comment="java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782662" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3735</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3735" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3735" ref_url="https://www.suse.com/security/cve/CVE-2017-3735" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2968-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3169-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0112-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID7022367" ref_url="https://www.suse.com/support/kb/doc/?id=7022367" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3192-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0029-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0315-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00113.html" source="SUSE-SU"/>
    <description>
    While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3735/">CVE-2017-3735</cve>
	<bugzilla href="https://bugzilla.suse.com/1056058">SUSE bug 1056058</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3736</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3736" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3736" ref_url="https://www.suse.com/security/cve/CVE-2017-3736" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3169-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003461.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004590.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2839-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="TID7022367" ref_url="https://www.suse.com/support/kb/doc/?id=7022367" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3192-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0029-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0315-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00113.html" source="SUSE-SU"/>
    <description>
    There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-3736/">CVE-2017-3736</cve>
	<bugzilla href="https://bugzilla.suse.com/1066242">SUSE bug 1066242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071906">SUSE bug 1071906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076369">SUSE bug 1076369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957814">SUSE bug 957814</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782659" comment="java-1_8_0-ibm-1.8.0_sr5.20-3.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782660" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782661" comment="java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782662" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3737</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3737" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3737" ref_url="https://www.suse.com/security/cve/CVE-2017-3737" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="TID7022464" ref_url="https://www.suse.com/support/kb/doc/?id=7022464" source="SUSE-SU"/>
		<reference ref_id="TID7022626" ref_url="https://www.suse.com/support/kb/doc/?id=7022626" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1057-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00069.html" source="SUSE-SU"/>
    <description>
    OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3737/">CVE-2017-3737</cve>
	<bugzilla href="https://bugzilla.suse.com/1071905">SUSE bug 1071905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072322">SUSE bug 1072322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076369">SUSE bug 1076369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089987">SUSE bug 1089987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089997">SUSE bug 1089997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3738</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-3738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3738" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-3738" ref_url="https://www.suse.com/security/cve/CVE-2017-3738" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3343-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003680.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006249.html" source="SUSE-SU"/>
		<reference ref_id="TID7022464" ref_url="https://www.suse.com/support/kb/doc/?id=7022464" source="SUSE-SU"/>
		<reference ref_id="TID7022627" ref_url="https://www.suse.com/support/kb/doc/?id=7022627" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00076.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0029-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0315-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00113.html" source="SUSE-SU"/>
    <description>
    There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3738/">CVE-2017-3738</cve>
	<bugzilla href="https://bugzilla.suse.com/1071906">SUSE bug 1071906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097757">SUSE bug 1097757</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5029</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5029" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5029" ref_url="https://www.suse.com/security/cve/CVE-2017-5029" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002865.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002887.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1390-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00079.html" source="SUSE-SU"/>
    <description>
    The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5029/">CVE-2017-5029</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035905">SUSE bug 1035905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123130">SUSE bug 1123130</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480825" comment="libxslt-devel-1.1.32-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480826" comment="libxslt-tools-1.1.32-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480827" comment="libxslt1-1.1.32-1.25 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5031</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5031" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5031" ref_url="https://www.suse.com/security/cve/CVE-2017-5031" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0738-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0740-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5031/">CVE-2017-5031</cve>
	<bugzilla href="https://bugzilla.suse.com/1028848">SUSE bug 1028848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028875">SUSE bug 1028875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5200</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5200" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5200" ref_url="https://www.suse.com/security/cve/CVE-2017-5200" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1581-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002948.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1053-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-04/msg00061.html" source="SUSE-SU"/>
    <description>
    Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5200/">CVE-2017-5200</cve>
	<bugzilla href="https://bugzilla.suse.com/1011800">SUSE bug 1011800</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347406" comment="salt is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009347405" comment="python3-salt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347406" comment="salt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347407" comment="salt-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347408" comment="salt-bash-completion is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347409" comment="salt-cloud is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347410" comment="salt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347411" comment="salt-fish-completion is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347412" comment="salt-master is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347413" comment="salt-minion is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347414" comment="salt-proxy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347415" comment="salt-ssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347416" comment="salt-standalone-formulas-configuration is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347417" comment="salt-syndic is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009656852" comment="salt-transactional-update is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009347418" comment="salt-zsh-completion is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5202</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5202" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5202" ref_url="https://www.suse.com/security/cve/CVE-2017-5202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5202/">CVE-2017-5202</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5203</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5203" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5203" ref_url="https://www.suse.com/security/cve/CVE-2017-5203" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5203/">CVE-2017-5203</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5204</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5204" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5204" ref_url="https://www.suse.com/security/cve/CVE-2017-5204" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5204/">CVE-2017-5204</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5205</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5205" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5205" ref_url="https://www.suse.com/security/cve/CVE-2017-5205" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5205/">CVE-2017-5205</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5209</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5209" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5209" ref_url="https://www.suse.com/security/cve/CVE-2017-5209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0428-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0528-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5209/">CVE-2017-5209</cve>
	<bugzilla href="https://bugzilla.suse.com/1019531">SUSE bug 1019531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021610">SUSE bug 1021610</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486486" comment="libplist++-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486487" comment="libplist++3-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486488" comment="libplist-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5225</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5225" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5225" ref_url="https://www.suse.com/security/cve/CVE-2017-5225" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002639.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0512-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00091.html" source="SUSE-SU"/>
    <description>
    LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5225/">CVE-2017-5225</cve>
	<bugzilla href="https://bugzilla.suse.com/1019611">SUSE bug 1019611</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5226</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5226" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5226" ref_url="https://www.suse.com/security/cve/CVE-2017-5226" source="SUSE CVE"/>
    <description>
    When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-03-18"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5226/">CVE-2017-5226</cve>
	<bugzilla href="https://bugzilla.suse.com/1130637">SUSE bug 1130637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173998">SUSE bug 1173998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174073">SUSE bug 1174073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209411">SUSE bug 1209411</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486595" comment="bubblewrap-0.3.1-4.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486599" comment="flatpak-1.2.3-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486600" comment="flatpak-devel-1.2.3-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486601" comment="flatpak-zsh-completion-1.2.3-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486602" comment="libflatpak0-1.2.3-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486603" comment="typelib-1_0-Flatpak-1_0-1.2.3-2.12 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5338</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5338" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5338" ref_url="https://www.suse.com/security/cve/CVE-2017-5338" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5338/">CVE-2017-5338</cve>
	<bugzilla href="https://bugzilla.suse.com/1019037">SUSE bug 1019037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487772" comment="libgit2-26-0.26.8-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487773" comment="libgit2-devel-0.26.8-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5339</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5339" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5339" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5339" ref_url="https://www.suse.com/security/cve/CVE-2017-5339" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002635.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0397-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5339/">CVE-2017-5339</cve>
	<bugzilla href="https://bugzilla.suse.com/1019037">SUSE bug 1019037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487772" comment="libgit2-26-0.26.8-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487773" comment="libgit2-devel-0.26.8-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175341" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5341</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5341" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5341" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5341" ref_url="https://www.suse.com/security/cve/CVE-2017-5341" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5341/">CVE-2017-5341</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5342</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5342" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5342" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5342" ref_url="https://www.suse.com/security/cve/CVE-2017-5342" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5342/">CVE-2017-5342</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5373</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5373" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5373" ref_url="https://www.suse.com/security/cve/CVE-2017-5373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5373/">CVE-2017-5373</cve>
	<bugzilla href="https://bugzilla.suse.com/1021824">SUSE bug 1021824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5374</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5374" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5374" ref_url="https://www.suse.com/security/cve/CVE-2017-5374" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5374/">CVE-2017-5374</cve>
	<bugzilla href="https://bugzilla.suse.com/1021841">SUSE bug 1021841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5375</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5375" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5375" ref_url="https://www.suse.com/security/cve/CVE-2017-5375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5375/">CVE-2017-5375</cve>
	<bugzilla href="https://bugzilla.suse.com/1021814">SUSE bug 1021814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5376</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5376" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5376" ref_url="https://www.suse.com/security/cve/CVE-2017-5376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5376/">CVE-2017-5376</cve>
	<bugzilla href="https://bugzilla.suse.com/1021817">SUSE bug 1021817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5377</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5377" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5377" ref_url="https://www.suse.com/security/cve/CVE-2017-5377" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable crash. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5377/">CVE-2017-5377</cve>
	<bugzilla href="https://bugzilla.suse.com/1021826">SUSE bug 1021826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5378</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5378" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5378" ref_url="https://www.suse.com/security/cve/CVE-2017-5378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, and also allows for data leakage of an object's content using these hash codes. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5378/">CVE-2017-5378</cve>
	<bugzilla href="https://bugzilla.suse.com/1021818">SUSE bug 1021818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5379</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5379" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5379" ref_url="https://www.suse.com/security/cve/CVE-2017-5379" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Web Animations when interacting with cycle collection found through fuzzing. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5379/">CVE-2017-5379</cve>
	<bugzilla href="https://bugzilla.suse.com/1021827">SUSE bug 1021827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5380</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5380" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5380" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5380" ref_url="https://www.suse.com/security/cve/CVE-2017-5380" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5380/">CVE-2017-5380</cve>
	<bugzilla href="https://bugzilla.suse.com/1021819">SUSE bug 1021819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5381</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5381" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5381" ref_url="https://www.suse.com/security/cve/CVE-2017-5381" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a certificate contains slashes, allowing certificate content to be saved in unsafe locations with an arbitrary filename. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5381/">CVE-2017-5381</cve>
	<bugzilla href="https://bugzilla.suse.com/1021830">SUSE bug 1021830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5382</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5382" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5382" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5382" ref_url="https://www.suse.com/security/cve/CVE-2017-5382" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5382/">CVE-2017-5382</cve>
	<bugzilla href="https://bugzilla.suse.com/1021831">SUSE bug 1021831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5383</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5383" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5383" ref_url="https://www.suse.com/security/cve/CVE-2017-5383" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5383/">CVE-2017-5383</cve>
	<bugzilla href="https://bugzilla.suse.com/1021822">SUSE bug 1021822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5384</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5384" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5384" ref_url="https://www.suse.com/security/cve/CVE-2017-5384" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with the full URL path which exposes more information than would be sent to the proxy itself in the case of HTTPS. Normally the Proxy Auto-Config file is specified by the user or machine owner and presumed to be non-malicious, but if a user has enabled Web Proxy Auto Detect (WPAD) this file can be served remotely. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5384/">CVE-2017-5384</cve>
	<bugzilla href="https://bugzilla.suse.com/1021832">SUSE bug 1021832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5385</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5385" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5385" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5385" ref_url="https://www.suse.com/security/cve/CVE-2017-5385" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, leading to potential information disclosure for sites using this header. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5385/">CVE-2017-5385</cve>
	<bugzilla href="https://bugzilla.suse.com/1021833">SUSE bug 1021833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5386</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5386" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5386" ref_url="https://www.suse.com/security/cve/CVE-2017-5386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential data disclosure or privilege escalation in affected extensions. This vulnerability affects Firefox ESR &lt; 45.7 and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-5386/">CVE-2017-5386</cve>
	<bugzilla href="https://bugzilla.suse.com/1021823">SUSE bug 1021823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5387</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5387" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5387" ref_url="https://www.suse.com/security/cve/CVE-2017-5387" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on a "&lt;track&gt;" tag refers to a file that does not exist if the source page is loaded locally. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5387/">CVE-2017-5387</cve>
	<bugzilla href="https://bugzilla.suse.com/1021839">SUSE bug 1021839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5388</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5388" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5388" ref_url="https://www.suse.com/security/cve/CVE-2017-5388" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short period of time due to a lack of rate limiting being applied on e10s systems, allowing for a denial of service attack. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5388/">CVE-2017-5388</cve>
	<bugzilla href="https://bugzilla.suse.com/1021840">SUSE bug 1021840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5389</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5389" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5389" ref_url="https://www.suse.com/security/cve/CVE-2017-5389" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using host requests to redirect script loads to a malicious site. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5389/">CVE-2017-5389</cve>
	<bugzilla href="https://bugzilla.suse.com/1021828">SUSE bug 1021828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5390</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5390" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5390" ref_url="https://www.suse.com/security/cve/CVE-2017-5390" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers data, allowing for potential privilege escalation. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5390/">CVE-2017-5390</cve>
	<bugzilla href="https://bugzilla.suse.com/1021820">SUSE bug 1021820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5391</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5391" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5391" ref_url="https://www.suse.com/security/cve/CVE-2017-5391" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5391/">CVE-2017-5391</cve>
	<bugzilla href="https://bugzilla.suse.com/1021835">SUSE bug 1021835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5392</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5392" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5392" ref_url="https://www.suse.com/security/cve/CVE-2017-5392" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and corruption, which leads to potentially exploitable crashes. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5392/">CVE-2017-5392</cve>
	<bugzilla href="https://bugzilla.suse.com/1021836">SUSE bug 1021836</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5393</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5393" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5393" ref_url="https://www.suse.com/security/cve/CVE-2017-5393" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site. This could allow malicious extensions to install additional extensions from the CDN in combination with an XSS attack on Mozilla AMO sites. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5393/">CVE-2017-5393</cve>
	<bugzilla href="https://bugzilla.suse.com/1021837">SUSE bug 1021837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5394</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5394" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5394" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5394" ref_url="https://www.suse.com/security/cve/CVE-2017-5394" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    A location bar spoofing attack where the location bar of loaded page will be shown over the content of another tab due to a series of JavaScript events combined with fullscreen mode. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5394/">CVE-2017-5394</cve>
	<bugzilla href="https://bugzilla.suse.com/1021834">SUSE bug 1021834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5395</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5395" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5395" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5395" ref_url="https://www.suse.com/security/cve/CVE-2017-5395" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled out of view if navigations between pages can be timed correctly. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5395/">CVE-2017-5395</cve>
	<bugzilla href="https://bugzilla.suse.com/1021838">SUSE bug 1021838</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5396</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5396" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5396" ref_url="https://www.suse.com/security/cve/CVE-2017-5396" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0358-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00002.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. This vulnerability affects Thunderbird &lt; 45.7, Firefox ESR &lt; 45.7, and Firefox &lt; 51.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5396/">CVE-2017-5396</cve>
	<bugzilla href="https://bugzilla.suse.com/1021821">SUSE bug 1021821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1021991">SUSE bug 1021991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334013" comment="MozillaFirefox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5398</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5398" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5398" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5398" ref_url="https://www.suse.com/security/cve/CVE-2017-5398" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5398/">CVE-2017-5398</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5399</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5399" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5399" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5399" ref_url="https://www.suse.com/security/cve/CVE-2017-5399" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5399/">CVE-2017-5399</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5400</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5400" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5400" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5400" ref_url="https://www.suse.com/security/cve/CVE-2017-5400" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5400/">CVE-2017-5400</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5401</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5401" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5401" ref_url="https://www.suse.com/security/cve/CVE-2017-5401" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5401/">CVE-2017-5401</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5402</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5402" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5402" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5402" ref_url="https://www.suse.com/security/cve/CVE-2017-5402" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5402/">CVE-2017-5402</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5403</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5403" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5403" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5403" ref_url="https://www.suse.com/security/cve/CVE-2017-5403" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5403/">CVE-2017-5403</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175404" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5404</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5404" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5404" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5404" ref_url="https://www.suse.com/security/cve/CVE-2017-5404" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5404/">CVE-2017-5404</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5405</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5405" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5405" ref_url="https://www.suse.com/security/cve/CVE-2017-5405" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5405/">CVE-2017-5405</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5406</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5406" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5406" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5406" ref_url="https://www.suse.com/security/cve/CVE-2017-5406" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empty masks. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5406/">CVE-2017-5406</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5407</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5407" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5407" ref_url="https://www.suse.com/security/cve/CVE-2017-5407" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information disclosure. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5407/">CVE-2017-5407</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5408</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5408" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5408" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5408" ref_url="https://www.suse.com/security/cve/CVE-2017-5408" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5408/">CVE-2017-5408</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5410</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5410" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5410" ref_url="https://www.suse.com/security/cve/CVE-2017-5410" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0714-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0732-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0688-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for memory cleanup. This vulnerability affects Firefox &lt; 52, Firefox ESR &lt; 45.8, Thunderbird &lt; 52, and Thunderbird &lt; 45.8.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5410/">CVE-2017-5410</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5412</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5412" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5412" ref_url="https://www.suse.com/security/cve/CVE-2017-5412" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A buffer overflow read during SVG filter color value operations, resulting in data exposure. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5412/">CVE-2017-5412</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175413" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5413</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5413" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5413" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5413" ref_url="https://www.suse.com/security/cve/CVE-2017-5413" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A segmentation fault can occur during some bidirectional layout operations. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5413/">CVE-2017-5413</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5414</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5414" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5414" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5414" ref_url="https://www.suse.com/security/cve/CVE-2017-5414" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to information disclosure, such as the operating system or the local account name. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5414/">CVE-2017-5414</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5415</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5415" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5415" ref_url="https://www.suse.com/security/cve/CVE-2017-5415" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
    <description>
    An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion and further spoofing attacks. This vulnerability affects Firefox &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5415/">CVE-2017-5415</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5416</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5416" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5416" ref_url="https://www.suse.com/security/cve/CVE-2017-5416" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    In certain circumstances a networking event listener can be prematurely released. This appears to result in a null dereference in practice. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5416/">CVE-2017-5416</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5417</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5417" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5417" ref_url="https://www.suse.com/security/cve/CVE-2017-5417" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
    <description>
    When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that the displayed location following navigation does not match the URL of the newly loaded page. This allows for spoofing attacks. This vulnerability affects Firefox &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5417/">CVE-2017-5417</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5418</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5418" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5418" ref_url="https://www.suse.com/security/cve/CVE-2017-5418" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information leakage through the reading of random memory containing matches to specifically set patterns. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5418/">CVE-2017-5418</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5419</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5419" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5419" ref_url="https://www.suse.com/security/cve/CVE-2017-5419" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdown through the operating system. This is a denial of service (DOS) attack. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5419/">CVE-2017-5419</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5420</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5420" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5420" ref_url="https://www.suse.com/security/cve/CVE-2017-5420" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
    <description>
    A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects Firefox &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5420/">CVE-2017-5420</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5421</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5421" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5421" ref_url="https://www.suse.com/security/cve/CVE-2017-5421" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5421/">CVE-2017-5421</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5422</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5422" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5422" ref_url="https://www.suse.com/security/cve/CVE-2017-5422" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    If a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it can trigger a non-exploitable browser crash when the hyperlink is selected. This was fixed by no longer making "view-source:" linkable. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5422/">CVE-2017-5422</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5426</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5426" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5426" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5426" ref_url="https://www.suse.com/security/cve/CVE-2017-5426" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is started, the sandbox fails to be applied and items that would run within the sandbox are run protected only by the running filter which is typically weak compared to the sandbox. Note: this issue only affects Linux. Other operating systems are not affected. This vulnerability affects Firefox &lt; 52 and Thunderbird &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5426/">CVE-2017-5426</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5427</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5427" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5427" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5427" ref_url="https://www.suse.com/security/cve/CVE-2017-5427" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0690-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00009.html" source="SUSE-SU"/>
    <description>
    A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory. If a malicious user with local access puts chrome.manifest and other referenced files in this directory, they will be loaded and activated during startup. This could result in malicious software being added without consent or modification of referenced installed files. This vulnerability affects Firefox &lt; 52.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5427/">CVE-2017-5427</cve>
	<bugzilla href="https://bugzilla.suse.com/1028391">SUSE bug 1028391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028393">SUSE bug 1028393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5428</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5428" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5428" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5428" ref_url="https://www.suse.com/security/cve/CVE-2017-5428" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0765-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00021.html" source="SUSE-SU"/>
    <description>
    An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the "createImageBitmap" API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user's computer. This vulnerability affects Firefox ESR &lt; 52.0.1 and Firefox &lt; 52.0.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5428/">CVE-2017-5428</cve>
	<bugzilla href="https://bugzilla.suse.com/1029822">SUSE bug 1029822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5429</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5429" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5429" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5429" ref_url="https://www.suse.com/security/cve/CVE-2017-5429" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5429/">CVE-2017-5429</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5430</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5430" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5430" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5430" ref_url="https://www.suse.com/security/cve/CVE-2017-5430" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5430/">CVE-2017-5430</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5432</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5432" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5432" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5432" ref_url="https://www.suse.com/security/cve/CVE-2017-5432" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5432/">CVE-2017-5432</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5433</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5433" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5433" ref_url="https://www.suse.com/security/cve/CVE-2017-5433" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5433/">CVE-2017-5433</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5434</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5434" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5434" ref_url="https://www.suse.com/security/cve/CVE-2017-5434" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5434/">CVE-2017-5434</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5435</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5435" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5435" ref_url="https://www.suse.com/security/cve/CVE-2017-5435" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5435/">CVE-2017-5435</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5436</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5436" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5436" ref_url="https://www.suse.com/security/cve/CVE-2017-5436" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1273-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00026.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5436/">CVE-2017-5436</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035204">SUSE bug 1035204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480301" comment="graphite2-devel-1.3.11-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480302" comment="libgraphite2-3-1.3.11-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480303" comment="libgraphite2-3-32bit-1.3.11-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5437</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5437" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5437" ref_url="https://www.suse.com/security/cve/CVE-2017-5437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197.  Reason: This candidate is a duplicate of CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197.  Notes: All CVE users should reference CVE-2016-10195, CVE-2016-10196, and/or CVE-2016-10197 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2017-5437/">CVE-2017-5437</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5438</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5438" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5438" ref_url="https://www.suse.com/security/cve/CVE-2017-5438" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5438/">CVE-2017-5438</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5439</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5439" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5439" ref_url="https://www.suse.com/security/cve/CVE-2017-5439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5439/">CVE-2017-5439</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5440</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5440" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5440" ref_url="https://www.suse.com/security/cve/CVE-2017-5440" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5440/">CVE-2017-5440</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5441</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5441" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5441" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5441" ref_url="https://www.suse.com/security/cve/CVE-2017-5441" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5441/">CVE-2017-5441</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5442</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5442" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5442" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5442" ref_url="https://www.suse.com/security/cve/CVE-2017-5442" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5442/">CVE-2017-5442</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5443</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5443" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5443" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5443" ref_url="https://www.suse.com/security/cve/CVE-2017-5443" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5443/">CVE-2017-5443</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5444</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5444" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5444" ref_url="https://www.suse.com/security/cve/CVE-2017-5444" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5444/">CVE-2017-5444</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5445</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5445" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5445" ref_url="https://www.suse.com/security/cve/CVE-2017-5445" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5445/">CVE-2017-5445</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5446</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5446" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5446" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5446" ref_url="https://www.suse.com/security/cve/CVE-2017-5446" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5446/">CVE-2017-5446</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5447</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5447" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5447" ref_url="https://www.suse.com/security/cve/CVE-2017-5447" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5447/">CVE-2017-5447</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5448</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5448" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5448" ref_url="https://www.suse.com/security/cve/CVE-2017-5448" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media Plugin (GMP) sandbox. If a second mechanism is found to escape the sandbox, this vulnerability allows for the writing of arbitrary data within memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-5448/">CVE-2017-5448</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5449</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5449" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5449" ref_url="https://www.suse.com/security/cve/CVE-2017-5449" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5449/">CVE-2017-5449</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5451</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5451" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5451" ref_url="https://www.suse.com/security/cve/CVE-2017-5451" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5451/">CVE-2017-5451</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5454</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5454" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5454" ref_url="https://www.suse.com/security/cve/CVE-2017-5454" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5454/">CVE-2017-5454</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175455" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5455</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5455" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5455" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5455" ref_url="https://www.suse.com/security/cve/CVE-2017-5455" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
    <description>
    The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR &lt; 52.1 and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-5455/">CVE-2017-5455</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5456</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5456" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5456" ref_url="https://www.suse.com/security/cve/CVE-2017-5456" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
    <description>
    A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR &lt; 52.1 and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5456/">CVE-2017-5456</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5459</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5459" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5459" ref_url="https://www.suse.com/security/cve/CVE-2017-5459" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5459/">CVE-2017-5459</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5460</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5460" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5460" ref_url="https://www.suse.com/security/cve/CVE-2017-5460" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5460/">CVE-2017-5460</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5461</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5461" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5461" ref_url="https://www.suse.com/security/cve/CVE-2017-5461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5461/">CVE-2017-5461</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5462</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5462" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5462" ref_url="https://www.suse.com/security/cve/CVE-2017-5462" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5462/">CVE-2017-5462</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5464</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5464" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5464" ref_url="https://www.suse.com/security/cve/CVE-2017-5464" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5464/">CVE-2017-5464</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5465</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5465" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5465" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5465" ref_url="https://www.suse.com/security/cve/CVE-2017-5465" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5465/">CVE-2017-5465</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5466</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5466" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5466" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5466" ref_url="https://www.suse.com/security/cve/CVE-2017-5466" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "data:text/html" page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5466/">CVE-2017-5466</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5467</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5467" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5467" ref_url="https://www.suse.com/security/cve/CVE-2017-5467" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1099-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5467/">CVE-2017-5467</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5469</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5469" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5469" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5469" ref_url="https://www.suse.com/security/cve/CVE-2017-5469" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1248-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1268-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00048.html" source="SUSE-SU"/>
    <description>
    Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird &lt; 52.1, Firefox ESR &lt; 45.9, Firefox ESR &lt; 52.1, and Firefox &lt; 53.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5469/">CVE-2017-5469</cve>
	<bugzilla href="https://bugzilla.suse.com/1035082">SUSE bug 1035082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1035209">SUSE bug 1035209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5470</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5470" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5470" ref_url="https://www.suse.com/security/cve/CVE-2017-5470" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-5470/">CVE-2017-5470</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5472</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5472" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5472" ref_url="https://www.suse.com/security/cve/CVE-2017-5472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1669-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2235-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1579-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00017.html" source="SUSE-SU"/>
    <description>
    A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-5472/">CVE-2017-5472</cve>
	<bugzilla href="https://bugzilla.suse.com/1043960">SUSE bug 1043960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044239">SUSE bug 1044239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044240">SUSE bug 1044240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044241">SUSE bug 1044241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044242">SUSE bug 1044242</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486567" comment="MozillaFirefox-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486568" comment="MozillaFirefox-devel-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486569" comment="MozillaFirefox-translations-common-60.6.2-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486570" comment="MozillaFirefox-translations-other-60.6.2-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489048" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489049" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489050" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5482</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5482" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5482" ref_url="https://www.suse.com/security/cve/CVE-2017-5482" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5482/">CVE-2017-5482</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5483</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5483" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5483" ref_url="https://www.suse.com/security/cve/CVE-2017-5483" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5483/">CVE-2017-5483</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5484</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5484" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5484" ref_url="https://www.suse.com/security/cve/CVE-2017-5484" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5484/">CVE-2017-5484</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5485</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5485" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5485" ref_url="https://www.suse.com/security/cve/CVE-2017-5485" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5485/">CVE-2017-5485</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5486</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5486" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5486" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5486" ref_url="https://www.suse.com/security/cve/CVE-2017-5486" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002829.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html" source="SUSE-SU"/>
    <description>
    The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5486/">CVE-2017-5486</cve>
	<bugzilla href="https://bugzilla.suse.com/1020940">SUSE bug 1020940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481667" comment="tcpdump-4.9.2-3.3.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5495</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5495" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5495" ref_url="https://www.suse.com/security/cve/CVE-2017-5495" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2294-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0455-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0457-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1201-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00020.html" source="SUSE-SU"/>
    <description>
    All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service of Quagga daemons, or even the entire host. When Quagga daemons are configured with their telnet CLI enabled, anyone who can connect to the TCP ports can trigger this vulnerability, prior to authentication. Most distributions restrict the Quagga telnet interface to local access only by default. The Quagga telnet interface 'vty' input buffer grows automatically, without bound, so long as a newline is not entered. This allows an attacker to cause the Quagga daemon to allocate unbounded memory by sending very long strings without a newline. Eventually the daemon is terminated by the system, or the system itself runs out of memory. This is fixed in Quagga 1.1.1 and Free Range Routing (FRR) Protocol Suite 2017-01-10.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5495/">CVE-2017-5495</cve>
	<bugzilla href="https://bugzilla.suse.com/1021669">SUSE bug 1021669</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488182" comment="libfpm_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488183" comment="libospf0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488184" comment="libospfapiclient0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488185" comment="libquagga_pb0-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488186" comment="libzebra1-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488187" comment="quagga-1.1.1-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488188" comment="quagga-devel-1.1.1-2.29 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5498</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5498" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5498" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5498" ref_url="https://www.suse.com/security/cve/CVE-2017-5498" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002789.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00061.html" source="SUSE-SU"/>
    <description>
    libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5498/">CVE-2017-5498</cve>
	<bugzilla href="https://bugzilla.suse.com/1020353">SUSE bug 1020353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020451">SUSE bug 1020451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5499</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5499" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5499" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5499" ref_url="https://www.suse.com/security/cve/CVE-2017-5499" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5499/">CVE-2017-5499</cve>
	<bugzilla href="https://bugzilla.suse.com/1020451">SUSE bug 1020451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115637">SUSE bug 1115637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492479" comment="libjasper4-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495468" comment="libjasper-devel-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497875" comment="jasper-2.0.14-3.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5503</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5503" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5503" ref_url="https://www.suse.com/security/cve/CVE-2017-5503" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5503/">CVE-2017-5503</cve>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020458">SUSE bug 1020458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492479" comment="libjasper4-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495468" comment="libjasper-devel-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497875" comment="jasper-2.0.14-3.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5504</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5504" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5504" ref_url="https://www.suse.com/security/cve/CVE-2017-5504" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5504/">CVE-2017-5504</cve>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020458">SUSE bug 1020458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492479" comment="libjasper4-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495468" comment="libjasper-devel-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497875" comment="jasper-2.0.14-3.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5505</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5505" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5505" ref_url="https://www.suse.com/security/cve/CVE-2017-5505" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:2690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007443.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1517-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:1523-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html" source="SUSE-SU"/>
    <description>
    The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5505/">CVE-2017-5505</cve>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020458">SUSE bug 1020458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009492479" comment="libjasper4-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009495468" comment="libjasper-devel-2.0.14-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497875" comment="jasper-2.0.14-3.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5525</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5525" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5525" ref_url="https://www.suse.com/security/cve/CVE-2017-5525" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5525/">CVE-2017-5525</cve>
	<bugzilla href="https://bugzilla.suse.com/1020491">SUSE bug 1020491</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5526</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5526" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5526" ref_url="https://www.suse.com/security/cve/CVE-2017-5526" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2751-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2815-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2864-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2873-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2821-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2916-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00000.html" source="SUSE-SU"/>
    <description>
    Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5526/">CVE-2017-5526</cve>
	<bugzilla href="https://bugzilla.suse.com/1020589">SUSE bug 1020589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059777">SUSE bug 1059777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5545</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5545" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5545" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5545" ref_url="https://www.suse.com/security/cve/CVE-2017-5545" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0428-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5545/">CVE-2017-5545</cve>
	<bugzilla href="https://bugzilla.suse.com/1021610">SUSE bug 1021610</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486486" comment="libplist++-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486487" comment="libplist++3-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486488" comment="libplist-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5549</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5549" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5549" ref_url="https://www.suse.com/security/cve/CVE-2017-5549" source="SUSE CVE"/>
    <description>
    The klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the log.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5549/">CVE-2017-5549</cve>
	<bugzilla href="https://bugzilla.suse.com/1021256">SUSE bug 1021256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5551</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5551" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5551" ref_url="https://www.suse.com/security/cve/CVE-2017-5551" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0575-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0456-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00022.html" source="SUSE-SU"/>
    <description>
    The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5551/">CVE-2017-5551</cve>
	<bugzilla href="https://bugzilla.suse.com/1021258">SUSE bug 1021258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/995968">SUSE bug 995968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5552</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5552" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5552" ref_url="https://www.suse.com/security/cve/CVE-2017-5552" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Memory leak in the virgl_resource_attach_backing function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5552/">CVE-2017-5552</cve>
	<bugzilla href="https://bugzilla.suse.com/1021195">SUSE bug 1021195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5578</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5578" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5578" ref_url="https://www.suse.com/security/cve/CVE-2017-5578" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5578/">CVE-2017-5578</cve>
	<bugzilla href="https://bugzilla.suse.com/1021481">SUSE bug 1021481</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175579" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5579</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5579" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5579" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5579" ref_url="https://www.suse.com/security/cve/CVE-2017-5579" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5579/">CVE-2017-5579</cve>
	<bugzilla href="https://bugzilla.suse.com/1021741">SUSE bug 1021741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1022627">SUSE bug 1022627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5596</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5596" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5596" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5596" ref_url="https://www.suse.com/security/cve/CVE-2017-5596" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0364-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00010.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5596/">CVE-2017-5596</cve>
	<bugzilla href="https://bugzilla.suse.com/1021739">SUSE bug 1021739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5597</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5597" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5597" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5597" ref_url="https://www.suse.com/security/cve/CVE-2017-5597" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1174-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002844.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002925.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0364-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00010.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5597/">CVE-2017-5597</cve>
	<bugzilla href="https://bugzilla.suse.com/1021739">SUSE bug 1021739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5601</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5601" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5601" ref_url="https://www.suse.com/security/cve/CVE-2017-5601" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:0944-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010509.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0944-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:1930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011227.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0944-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2GOSOUIKGPKMNRIKY4M2SLF54G6W2YC4/" source="SUSE-SU"/>
    <description>
    An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5601/">CVE-2017-5601</cve>
	<bugzilla href="https://bugzilla.suse.com/1022528">SUSE bug 1022528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189528">SUSE bug 1189528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334081" comment="libarchive is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334266" comment="bsdtar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335917" comment="libarchive-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335916" comment="libarchive13 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5618</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5618" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5618" ref_url="https://www.suse.com/security/cve/CVE-2017-5618" source="SUSE CVE"/>
    <description>
    GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5618/">CVE-2017-5618</cve>
	<bugzilla href="https://bugzilla.suse.com/1021743">SUSE bug 1021743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334061" comment="screen is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480922" comment="screen-4.6.2-3.14 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5667</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5667" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5667" ref_url="https://www.suse.com/security/cve/CVE-2017-5667" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5667/">CVE-2017-5667</cve>
	<bugzilla href="https://bugzilla.suse.com/1022541">SUSE bug 1022541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5669</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5669" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5669" ref_url="https://www.suse.com/security/cve/CVE-2017-5669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2342-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00000.html" source="SUSE-SU"/>
    <description>
    The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5669/">CVE-2017-5669</cve>
	<bugzilla href="https://bugzilla.suse.com/1026914">SUSE bug 1026914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102390">SUSE bug 1102390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5715</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5715" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5715" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0006-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0008-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0009-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0020-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0036-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0067-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0068-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0069-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0114-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0383-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0416-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0482-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0552-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0555-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0601-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0609-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0660-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0705-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0708-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0757-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003830.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0838-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0841-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0861-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0920-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0986-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1308-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1363-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1376-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004082.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004099.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004106.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004112.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004113.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1567-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004160.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1570-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004161.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004162.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1571-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004688.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1759-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004215.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004222.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004324.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2141-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004357.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004535.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2631-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004709.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:13999-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005270.html" source="SUSE-SU"/>
		<reference ref_id="TID000019122" ref_url="https://www.suse.com/support/kb/doc/?id=000019122" source="SUSE-SU"/>
		<reference ref_id="TID7022512" ref_url="https://www.suse.com/support/kb/doc/?id=7022512" source="SUSE-SU"/>
		<reference ref_id="TID7022514" ref_url="https://www.suse.com/support/kb/doc/?id=7022514" source="SUSE-SU"/>
		<reference ref_id="TID7022531" ref_url="https://www.suse.com/support/kb/doc/?id=7022531" source="SUSE-SU"/>
		<reference ref_id="TID7022541" ref_url="https://www.suse.com/support/kb/doc/?id=7022541" source="SUSE-SU"/>
		<reference ref_id="TID7022548" ref_url="https://www.suse.com/support/kb/doc/?id=7022548" source="SUSE-SU"/>
		<reference ref_id="TID7022568" ref_url="https://www.suse.com/support/kb/doc/?id=7022568" source="SUSE-SU"/>
		<reference ref_id="TID7022569" ref_url="https://www.suse.com/support/kb/doc/?id=7022569" source="SUSE-SU"/>
		<reference ref_id="TID7022571" ref_url="https://www.suse.com/support/kb/doc/?id=7022571" source="SUSE-SU"/>
		<reference ref_id="TID7022572" ref_url="https://www.suse.com/support/kb/doc/?id=7022572" source="SUSE-SU"/>
		<reference ref_id="TID7022578" ref_url="https://www.suse.com/support/kb/doc/?id=7022578" source="SUSE-SU"/>
		<reference ref_id="TID7022579" ref_url="https://www.suse.com/support/kb/doc/?id=7022579" source="SUSE-SU"/>
		<reference ref_id="TID7022982" ref_url="https://www.suse.com/support/kb/doc/?id=7022982" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU--1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0013-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0026-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0030-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0059-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0066-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0408-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0710-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00050.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0780-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0939-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1623-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2237-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2524-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-08/msg00080.html" source="SUSE-SU"/>
    <description>
    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<bugzilla href="https://bugzilla.suse.com/1068032">SUSE bug 1068032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074562">SUSE bug 1074562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074578">SUSE bug 1074578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074701">SUSE bug 1074701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074741">SUSE bug 1074741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074919">SUSE bug 1074919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075006">SUSE bug 1075006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075007">SUSE bug 1075007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075262">SUSE bug 1075262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075419">SUSE bug 1075419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076115">SUSE bug 1076115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076372">SUSE bug 1076372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076606">SUSE bug 1076606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078353">SUSE bug 1078353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1080039">SUSE bug 1080039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087887">SUSE bug 1087887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087939">SUSE bug 1087939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088147">SUSE bug 1088147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089055">SUSE bug 1089055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091815">SUSE bug 1091815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095735">SUSE bug 1095735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102517">SUSE bug 1102517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105108">SUSE bug 1105108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126516">SUSE bug 1126516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173489">SUSE bug 1173489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201457">SUSE bug 1201457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203236">SUSE bug 1203236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481206" comment="kernel-firmware-20190118-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481528" comment="libvirt-libs-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481207" comment="ucode-amd-20190118-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481669" comment="ucode-intel-20190507-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488366" comment="libvirt-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488367" comment="libvirt-admin-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488368" comment="libvirt-bash-completion-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488369" comment="libvirt-client-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488370" comment="libvirt-daemon-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488371" comment="libvirt-daemon-config-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488372" comment="libvirt-daemon-config-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488373" comment="libvirt-daemon-driver-interface-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488374" comment="libvirt-daemon-driver-libxl-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488375" comment="libvirt-daemon-driver-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488376" comment="libvirt-daemon-driver-network-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488377" comment="libvirt-daemon-driver-nodedev-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488378" comment="libvirt-daemon-driver-nwfilter-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488379" comment="libvirt-daemon-driver-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488380" comment="libvirt-daemon-driver-secret-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488381" comment="libvirt-daemon-driver-storage-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488382" comment="libvirt-daemon-driver-storage-core-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488383" comment="libvirt-daemon-driver-storage-disk-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488384" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488385" comment="libvirt-daemon-driver-storage-logical-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488386" comment="libvirt-daemon-driver-storage-mpath-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488387" comment="libvirt-daemon-driver-storage-rbd-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488388" comment="libvirt-daemon-driver-storage-scsi-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488389" comment="libvirt-daemon-hooks-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488390" comment="libvirt-daemon-lxc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488391" comment="libvirt-daemon-qemu-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488392" comment="libvirt-daemon-xen-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488393" comment="libvirt-devel-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488394" comment="libvirt-doc-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488395" comment="libvirt-lock-sanlock-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488396" comment="libvirt-nss-5.1.0-6.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5731</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5731" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5731" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5731" ref_url="https://www.suse.com/security/cve/CVE-2017-5731" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004989.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00059.html" source="SUSE-SU"/>
    <description>
    Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5731/">CVE-2017-5731</cve>
	<bugzilla href="https://bugzilla.suse.com/1115917">SUSE bug 1115917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337928" comment="ovmf-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337929" comment="qemu-ovmf-x86_64 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339064" comment="qemu-uefi-aarch64 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337928" comment="ovmf-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337929" comment="qemu-ovmf-x86_64 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790366" comment="ovmf-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790367" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790368" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790369" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5732</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5732" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5732" ref_url="https://www.suse.com/security/cve/CVE-2017-5732" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004989.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00059.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5732/">CVE-2017-5732</cve>
	<bugzilla href="https://bugzilla.suse.com/1115917">SUSE bug 1115917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337928" comment="ovmf-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337929" comment="qemu-ovmf-x86_64 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339064" comment="qemu-uefi-aarch64 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337928" comment="ovmf-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337929" comment="qemu-ovmf-x86_64 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790366" comment="ovmf-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790367" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790368" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790369" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5733</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5733" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5733" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5733" ref_url="https://www.suse.com/security/cve/CVE-2017-5733" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004989.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00059.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5733/">CVE-2017-5733</cve>
	<bugzilla href="https://bugzilla.suse.com/1115917">SUSE bug 1115917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337928" comment="ovmf-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337929" comment="qemu-ovmf-x86_64 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339064" comment="qemu-uefi-aarch64 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337928" comment="ovmf-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337929" comment="qemu-ovmf-x86_64 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790366" comment="ovmf-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790367" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790368" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790369" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5734</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5734" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5734" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5734" ref_url="https://www.suse.com/security/cve/CVE-2017-5734" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004989.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00059.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5734/">CVE-2017-5734</cve>
	<bugzilla href="https://bugzilla.suse.com/1115917">SUSE bug 1115917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337928" comment="ovmf-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337929" comment="qemu-ovmf-x86_64 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339064" comment="qemu-uefi-aarch64 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337928" comment="ovmf-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337929" comment="qemu-ovmf-x86_64 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790366" comment="ovmf-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790367" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790368" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790369" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5735</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5735" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5735" ref_url="https://www.suse.com/security/cve/CVE-2017-5735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004973.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4194-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004986.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:4207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-December/004989.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:4254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00059.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5735/">CVE-2017-5735</cve>
	<bugzilla href="https://bugzilla.suse.com/1115917">SUSE bug 1115917</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337928" comment="ovmf-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337929" comment="qemu-ovmf-x86_64 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339064" comment="qemu-uefi-aarch64 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334152" comment="ovmf is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337928" comment="ovmf-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337929" comment="qemu-ovmf-x86_64 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009790366" comment="ovmf-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790367" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790368" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009790369" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.11.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5753</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2023:2960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016146.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2023:317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014849.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2023:318-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014850.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2023:319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014851.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2023:347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015202.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2023:348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015203.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2023:349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015204.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0069-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0113-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0114-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0171-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0552-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0601-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0609-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1376-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004078.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-July/004362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004377.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-February/005074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:0765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-March/005240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:2430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005952.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2862-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3929-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020993.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:1800-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:1801-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028741.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:1802-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:1803-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028738.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:1811-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028747.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:1848-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028819.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:1892-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028848.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:1894-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028846.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:1897-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028842.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:1992-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028974.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2232-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029439.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2506-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029875.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015468.html" source="SUSE-SU"/>
		<reference ref_id="TID000019122" ref_url="https://www.suse.com/support/kb/doc/?id=000019122" source="SUSE-SU"/>
		<reference ref_id="TID000019229" ref_url="https://www.suse.com/support/kb/doc/?id=000019229" source="SUSE-SU"/>
		<reference ref_id="TID7022512" ref_url="https://www.suse.com/support/kb/doc/?id=7022512" source="SUSE-SU"/>
		<reference ref_id="TID7022514" ref_url="https://www.suse.com/support/kb/doc/?id=7022514" source="SUSE-SU"/>
		<reference ref_id="TID7022531" ref_url="https://www.suse.com/support/kb/doc/?id=7022531" source="SUSE-SU"/>
		<reference ref_id="TID7022541" ref_url="https://www.suse.com/support/kb/doc/?id=7022541" source="SUSE-SU"/>
		<reference ref_id="TID7022548" ref_url="https://www.suse.com/support/kb/doc/?id=7022548" source="SUSE-SU"/>
		<reference ref_id="TID7022568" ref_url="https://www.suse.com/support/kb/doc/?id=7022568" source="SUSE-SU"/>
		<reference ref_id="TID7022569" ref_url="https://www.suse.com/support/kb/doc/?id=7022569" source="SUSE-SU"/>
		<reference ref_id="TID7022571" ref_url="https://www.suse.com/support/kb/doc/?id=7022571" source="SUSE-SU"/>
		<reference ref_id="TID7022572" ref_url="https://www.suse.com/support/kb/doc/?id=7022572" source="SUSE-SU"/>
		<reference ref_id="TID7022578" ref_url="https://www.suse.com/support/kb/doc/?id=7022578" source="SUSE-SU"/>
		<reference ref_id="TID7022579" ref_url="https://www.suse.com/support/kb/doc/?id=7022579" source="SUSE-SU"/>
		<reference ref_id="TID7023075" ref_url="https://www.suse.com/support/kb/doc/?id=7023075" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1623-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:2119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1212-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5IDOTKMILRKOFD2ODQXJF3OOEYZ3EMR5/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2861-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5MOJKTUHVZFZADZQ6EYELCLEJ5BD766Q/" source="SUSE-SU"/>
    <description>
    Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<bugzilla href="https://bugzilla.suse.com/1068032">SUSE bug 1068032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074562">SUSE bug 1074562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074578">SUSE bug 1074578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074701">SUSE bug 1074701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075006">SUSE bug 1075006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075419">SUSE bug 1075419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075748">SUSE bug 1075748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1080039">SUSE bug 1080039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087084">SUSE bug 1087084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087939">SUSE bug 1087939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089055">SUSE bug 1089055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136865">SUSE bug 1136865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209547">SUSE bug 1209547</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497044" comment="reiserfs-kmp-default-4.12.14-197.4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009508685" comment="kernel-default-extra-4.12.14-197.4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631131" comment="spectre-meltdown-checker-0.44-3.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009491427" comment="kernel-default-4.12.14-197.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491428" comment="kernel-default-base-4.12.14-197.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491429" comment="kernel-default-devel-4.12.14-197.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491430" comment="kernel-default-man-4.12.14-197.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491431" comment="kernel-devel-4.12.14-197.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491432" comment="kernel-macros-4.12.14-197.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009491433" comment="kernel-zfcpdump-4.12.14-197.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009496204" comment="kernel-docs-4.12.14-197.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496205" comment="kernel-obs-build-4.12.14-197.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496206" comment="kernel-source-4.12.14-197.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009496207" comment="kernel-syms-4.12.14-197.4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009753696" comment="kernel-default-livepatch-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753697" comment="kernel-default-livepatch-devel-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753698" comment="kernel-livepatch-4_12_14-150100_197_142-default-1-150100.3.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009497388" comment="kernel-livepatch-4_12_14-197_4-default-1-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009753702" comment="cluster-md-kmp-default-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753703" comment="dlm-kmp-default-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753704" comment="gfs2-kmp-default-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753705" comment="ocfs2-kmp-default-4.12.14-150100.197.142.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009753710" comment="kernel-default-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753711" comment="kernel-default-base-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753712" comment="kernel-default-devel-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753713" comment="kernel-devel-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753714" comment="kernel-docs-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753715" comment="kernel-macros-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753716" comment="kernel-obs-build-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753717" comment="kernel-source-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753718" comment="kernel-syms-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631131" comment="spectre-meltdown-checker-0.44-3.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009753742" comment="kernel-default-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753743" comment="kernel-default-base-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753744" comment="kernel-default-devel-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753713" comment="kernel-devel-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753714" comment="kernel-docs-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753715" comment="kernel-macros-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753745" comment="kernel-obs-build-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753717" comment="kernel-source-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753746" comment="kernel-syms-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753747" comment="reiserfs-kmp-default-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631131" comment="spectre-meltdown-checker-0.44-3.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009754510" comment="kernel-default-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009754511" comment="kernel-default-base-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009754512" comment="kernel-default-devel-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753620" comment="kernel-default-man-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753713" comment="kernel-devel-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753714" comment="kernel-docs-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753715" comment="kernel-macros-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009754513" comment="kernel-obs-build-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009753717" comment="kernel-source-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009754514" comment="kernel-syms-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009754515" comment="reiserfs-kmp-default-4.12.14-150100.197.142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631131" comment="spectre-meltdown-checker-0.44-3.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5754</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5754" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5754" ref_url="https://www.suse.com/security/cve/CVE-2017-5754" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0011-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0012-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0031-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0040-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0115-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0180-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0285-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003679.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003755.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0552-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003792.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0601-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0609-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004168.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004182.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1699-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004717.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004499.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004740.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0634-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013982.html" source="SUSE-SU"/>
		<reference ref_id="TID000019122" ref_url="https://www.suse.com/support/kb/doc/?id=000019122" source="SUSE-SU"/>
		<reference ref_id="TID7022512" ref_url="https://www.suse.com/support/kb/doc/?id=7022512" source="SUSE-SU"/>
		<reference ref_id="TID7022514" ref_url="https://www.suse.com/support/kb/doc/?id=7022514" source="SUSE-SU"/>
		<reference ref_id="TID7022531" ref_url="https://www.suse.com/support/kb/doc/?id=7022531" source="SUSE-SU"/>
		<reference ref_id="TID7022541" ref_url="https://www.suse.com/support/kb/doc/?id=7022541" source="SUSE-SU"/>
		<reference ref_id="TID7022548" ref_url="https://www.suse.com/support/kb/doc/?id=7022548" source="SUSE-SU"/>
		<reference ref_id="TID7022568" ref_url="https://www.suse.com/support/kb/doc/?id=7022568" source="SUSE-SU"/>
		<reference ref_id="TID7022569" ref_url="https://www.suse.com/support/kb/doc/?id=7022569" source="SUSE-SU"/>
		<reference ref_id="TID7022571" ref_url="https://www.suse.com/support/kb/doc/?id=7022571" source="SUSE-SU"/>
		<reference ref_id="TID7022572" ref_url="https://www.suse.com/support/kb/doc/?id=7022572" source="SUSE-SU"/>
		<reference ref_id="TID7022578" ref_url="https://www.suse.com/support/kb/doc/?id=7022578" source="SUSE-SU"/>
		<reference ref_id="TID7022579" ref_url="https://www.suse.com/support/kb/doc/?id=7022579" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1623-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00014.html" source="SUSE-SU"/>
    <description>
    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-05-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5754/">CVE-2017-5754</cve>
	<bugzilla href="https://bugzilla.suse.com/1068032">SUSE bug 1068032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074562">SUSE bug 1074562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074578">SUSE bug 1074578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074701">SUSE bug 1074701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075006">SUSE bug 1075006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075008">SUSE bug 1075008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087939">SUSE bug 1087939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089055">SUSE bug 1089055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115045">SUSE bug 1115045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136865">SUSE bug 1136865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201877">SUSE bug 1201877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5834</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5834" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5834" ref_url="https://www.suse.com/security/cve/CVE-2017-5834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0528-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5834/">CVE-2017-5834</cve>
	<bugzilla href="https://bugzilla.suse.com/1023848">SUSE bug 1023848</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486486" comment="libplist++-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486487" comment="libplist++3-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486488" comment="libplist-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5835</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5835" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5835" ref_url="https://www.suse.com/security/cve/CVE-2017-5835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0528-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5835/">CVE-2017-5835</cve>
	<bugzilla href="https://bugzilla.suse.com/1023822">SUSE bug 1023822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486486" comment="libplist++-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486487" comment="libplist++3-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486488" comment="libplist-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5836</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5836" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5836" ref_url="https://www.suse.com/security/cve/CVE-2017-5836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0528-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5836/">CVE-2017-5836</cve>
	<bugzilla href="https://bugzilla.suse.com/1023807">SUSE bug 1023807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1023848">SUSE bug 1023848</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486486" comment="libplist++-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486487" comment="libplist++3-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486488" comment="libplist-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5837</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5837" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5837" ref_url="https://www.suse.com/security/cve/CVE-2017-5837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002798.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002807.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005542.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0574-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1079-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00095.html" source="SUSE-SU"/>
    <description>
    The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5837/">CVE-2017-5837</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024076">SUSE bug 1024076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024079">SUSE bug 1024079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5838</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5838" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5838" ref_url="https://www.suse.com/security/cve/CVE-2017-5838" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0966-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002791.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0967-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002792.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0580-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00120.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1031-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00058.html" source="SUSE-SU"/>
    <description>
    The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5838/">CVE-2017-5838</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024051">SUSE bug 1024051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480317" comment="gstreamer-plugins-good-1.12.5-1.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480318" comment="gstreamer-plugins-good-lang-1.12.5-1.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481373" comment="libgstgl-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481374" comment="libgstphotography-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486615" comment="gstreamer-plugins-bad-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486616" comment="gstreamer-plugins-bad-devel-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486617" comment="gstreamer-plugins-bad-lang-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486618" comment="libgstadaptivedemux-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486619" comment="libgstbadallocators-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486620" comment="libgstbadaudio-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486621" comment="libgstbadbase-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486622" comment="libgstbadvideo-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486623" comment="libgstbasecamerabinsrc-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486624" comment="libgstcodecparsers-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486625" comment="libgstinsertbin-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486626" comment="libgstmpegts-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486627" comment="libgstplayer-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486628" comment="libgsturidownloader-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486629" comment="libgstwayland-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486630" comment="typelib-1_0-GstBadAllocators-1_0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486631" comment="typelib-1_0-GstGL-1_0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486632" comment="typelib-1_0-GstInsertBin-1_0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486633" comment="typelib-1_0-GstMpegts-1_0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486634" comment="typelib-1_0-GstPlayer-1_0-1.12.5-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488912" comment="gstreamer-plugins-ugly-1.12.5-1.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488913" comment="gstreamer-plugins-ugly-lang-1.12.5-1.35 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5839</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5839" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5839" ref_url="https://www.suse.com/security/cve/CVE-2017-5839" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002807.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0574-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00095.html" source="SUSE-SU"/>
    <description>
    The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5839/">CVE-2017-5839</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024047">SUSE bug 1024047</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5840</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5840" ref_url="https://www.suse.com/security/cve/CVE-2017-5840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002799.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002801.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1076-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00081.html" source="SUSE-SU"/>
    <description>
    The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving the current stts index.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5840/">CVE-2017-5840</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024034">SUSE bug 1024034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5841</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5841" ref_url="https://www.suse.com/security/cve/CVE-2017-5841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002801.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1076-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00081.html" source="SUSE-SU"/>
    <description>
    The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving ncdt tags.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5841/">CVE-2017-5841</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024030">SUSE bug 1024030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024062">SUSE bug 1024062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5842</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5842" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5842" ref_url="https://www.suse.com/security/cve/CVE-2017-5842" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002807.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0574-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00095.html" source="SUSE-SU"/>
    <description>
    The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted SMI file, as demonstrated by OneNote_Manager.smi.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5842/">CVE-2017-5842</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024041">SUSE bug 1024041</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5843</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5843" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5843" ref_url="https://www.suse.com/security/cve/CVE-2017-5843" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002790.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1032-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00059.html" source="SUSE-SU"/>
    <description>
    Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service (crash) via vectors involving stream tags, as demonstrated by 02785736.mxf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5843/">CVE-2017-5843</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024044">SUSE bug 1024044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5844</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5844" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5844" ref_url="https://www.suse.com/security/cve/CVE-2017-5844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002798.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002802.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002805.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002807.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14076-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005542.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0574-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00117.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1079-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00084.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1106-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00095.html" source="SUSE-SU"/>
    <description>
    The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted ASF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5844/">CVE-2017-5844</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024079">SUSE bug 1024079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5845</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5845" ref_url="https://www.suse.com/security/cve/CVE-2017-5845" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002801.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1076-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00081.html" source="SUSE-SU"/>
    <description>
    The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a ncdt sub-tag that "goes behind" the surrounding tag.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5845/">CVE-2017-5845</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024062">SUSE bug 1024062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5846</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5846" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5846" ref_url="https://www.suse.com/security/cve/CVE-2017-5846" source="SUSE CVE"/>
    <description>
    The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors related to the number of languages in a video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5846/">CVE-2017-5846</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5847</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5847" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5847" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5847" ref_url="https://www.suse.com/security/cve/CVE-2017-5847" source="SUSE CVE"/>
    <description>
    The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended content descriptors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5847/">CVE-2017-5847</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481373" comment="libgstgl-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481374" comment="libgstphotography-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486615" comment="gstreamer-plugins-bad-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486616" comment="gstreamer-plugins-bad-devel-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486617" comment="gstreamer-plugins-bad-lang-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486618" comment="libgstadaptivedemux-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486619" comment="libgstbadallocators-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486620" comment="libgstbadaudio-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486621" comment="libgstbadbase-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486622" comment="libgstbadvideo-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486623" comment="libgstbasecamerabinsrc-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486624" comment="libgstcodecparsers-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486625" comment="libgstinsertbin-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486626" comment="libgstmpegts-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486627" comment="libgstplayer-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486628" comment="libgsturidownloader-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486629" comment="libgstwayland-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486630" comment="typelib-1_0-GstBadAllocators-1_0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486631" comment="typelib-1_0-GstGL-1_0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486632" comment="typelib-1_0-GstInsertBin-1_0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486633" comment="typelib-1_0-GstMpegts-1_0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486634" comment="typelib-1_0-GstPlayer-1_0-1.12.5-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488912" comment="gstreamer-plugins-ugly-1.12.5-1.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488913" comment="gstreamer-plugins-ugly-lang-1.12.5-1.35 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5848</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5848" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5848" ref_url="https://www.suse.com/security/cve/CVE-2017-5848" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002790.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1032-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00059.html" source="SUSE-SU"/>
    <description>
    The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5848/">CVE-2017-5848</cve>
	<bugzilla href="https://bugzilla.suse.com/1023259">SUSE bug 1023259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024068">SUSE bug 1024068</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481373" comment="libgstgl-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481374" comment="libgstphotography-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486615" comment="gstreamer-plugins-bad-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486616" comment="gstreamer-plugins-bad-devel-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486617" comment="gstreamer-plugins-bad-lang-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486618" comment="libgstadaptivedemux-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486619" comment="libgstbadallocators-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486620" comment="libgstbadaudio-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486621" comment="libgstbadbase-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486622" comment="libgstbadvideo-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486623" comment="libgstbasecamerabinsrc-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486624" comment="libgstcodecparsers-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486625" comment="libgstinsertbin-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486626" comment="libgstmpegts-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486627" comment="libgstplayer-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486628" comment="libgsturidownloader-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486629" comment="libgstwayland-1_0-0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486630" comment="typelib-1_0-GstBadAllocators-1_0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486631" comment="typelib-1_0-GstGL-1_0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486632" comment="typelib-1_0-GstInsertBin-1_0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486633" comment="typelib-1_0-GstMpegts-1_0-1.12.5-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486634" comment="typelib-1_0-GstPlayer-1_0-1.12.5-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5856</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5856" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5856" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5856" ref_url="https://www.suse.com/security/cve/CVE-2017-5856" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5856/">CVE-2017-5856</cve>
	<bugzilla href="https://bugzilla.suse.com/1023053">SUSE bug 1023053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024186">SUSE bug 1024186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5857</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5857" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5857" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5857" ref_url="https://www.suse.com/security/cve/CVE-2017-5857" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
    <description>
    Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_UNREF commands sent without detaching the backing storage beforehand.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5857/">CVE-2017-5857</cve>
	<bugzilla href="https://bugzilla.suse.com/1023073">SUSE bug 1023073</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5884</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5884" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5884" ref_url="https://www.suse.com/security/cve/CVE-2017-5884" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009456.html" source="SUSE-SU"/>
    <description>
    gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyrect tile.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5884/">CVE-2017-5884</cve>
	<bugzilla href="https://bugzilla.suse.com/1024266">SUSE bug 1024266</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480546" comment="libgtk-vnc-2_0-0-0.7.2-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480547" comment="libgvnc-1_0-0-0.7.2-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488152" comment="gtk-vnc-devel-0.7.2-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488153" comment="libgvncpulse-1_0-0-0.7.2-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488154" comment="typelib-1_0-GVnc-1_0-0.7.2-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488155" comment="typelib-1_0-GVncPulse-1_0-0.7.2-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488156" comment="typelib-1_0-GtkVnc-1_0-0.7.2-1.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488157" comment="typelib-1_0-GtkVnc-2_0-0.7.2-1.33 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5885</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5885" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5885" ref_url="https://www.suse.com/security/cve/CVE-2017-5885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009456.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5885/">CVE-2017-5885</cve>
	<bugzilla href="https://bugzilla.suse.com/1024268">SUSE bug 1024268</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480546" comment="libgtk-vnc-2_0-0-0.7.2-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480547" comment="libgvnc-1_0-0-0.7.2-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488152" comment="gtk-vnc-devel-0.7.2-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488153" comment="libgvncpulse-1_0-0-0.7.2-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488154" comment="typelib-1_0-GVnc-1_0-0.7.2-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488155" comment="typelib-1_0-GVncPulse-1_0-0.7.2-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488156" comment="typelib-1_0-GtkVnc-1_0-0.7.2-1.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488157" comment="typelib-1_0-GtkVnc-2_0-0.7.2-1.33 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5897</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5897" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5897" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5897" ref_url="https://www.suse.com/security/cve/CVE-2017-5897" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0575-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-5897/">CVE-2017-5897</cve>
	<bugzilla href="https://bugzilla.suse.com/1023762">SUSE bug 1023762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5898</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5898" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5898" ref_url="https://www.suse.com/security/cve/CVE-2017-5898" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0661-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1241-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0707-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00058.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5898/">CVE-2017-5898</cve>
	<bugzilla href="https://bugzilla.suse.com/1023907">SUSE bug 1023907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024307">SUSE bug 1024307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5931</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5931" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5931" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5931" ref_url="https://www.suse.com/security/cve/CVE-2017-5931" source="SUSE CVE"/>
    <description>
    Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5931/">CVE-2017-5931</cve>
	<bugzilla href="https://bugzilla.suse.com/1024114">SUSE bug 1024114</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175932" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5932</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5932" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5932" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5932" ref_url="https://www.suse.com/security/cve/CVE-2017-5932" source="SUSE CVE"/>
    <description>
    The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution metacharacter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-28"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5932/">CVE-2017-5932</cve>
	<bugzilla href="https://bugzilla.suse.com/1024171">SUSE bug 1024171</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334330" comment="bash is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334330" comment="bash is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659638" comment="bash-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337667" comment="bash-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337715" comment="bash-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659639" comment="libreadline7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659640" comment="libreadline7-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337673" comment="readline-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337669" comment="readline-doc is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5937</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5937" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5937" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5937" ref_url="https://www.suse.com/security/cve/CVE-2017-5937" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0902-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00119.html" source="SUSE-SU"/>
    <description>
    The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5937/">CVE-2017-5937</cve>
	<bugzilla href="https://bugzilla.suse.com/1024232">SUSE bug 1024232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1041089">SUSE bug 1041089</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488212" comment="libvirglrenderer0-0.6.0-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488213" comment="virglrenderer-devel-0.6.0-2.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5950</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5950" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5950" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5950" ref_url="https://www.suse.com/security/cve/CVE-2017-5950" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003791.html" source="SUSE-SU"/>
    <description>
    The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5950/">CVE-2017-5950</cve>
	<bugzilla href="https://bugzilla.suse.com/1032144">SUSE bug 1032144</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486516" comment="libyaml-cpp0_6-0.6.1-2.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486517" comment="yaml-cpp-devel-0.6.1-2.15 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5951</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5951" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5951" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5951" ref_url="https://www.suse.com/security/cve/CVE-2017-5951" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1404-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00014.html" source="SUSE-SU"/>
    <description>
    The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5951/">CVE-2017-5951</cve>
	<bugzilla href="https://bugzilla.suse.com/1032114">SUSE bug 1032114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036453">SUSE bug 1036453</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481135" comment="ghostscript-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481136" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481137" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5953</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5953" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5953" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5953" ref_url="https://www.suse.com/security/cve/CVE-2017-5953" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013343.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0511-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1811-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00039.html" source="SUSE-SU"/>
    <description>
    vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-12-28"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5953/">CVE-2017-5953</cve>
	<bugzilla href="https://bugzilla.suse.com/1024724">SUSE bug 1024724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123143">SUSE bug 1123143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173534">SUSE bug 1173534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482738" comment="gvim-8.0.1568-3.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480954" comment="vim-8.0.1568-3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480955" comment="vim-data-8.0.1568-3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480956" comment="vim-data-common-8.0.1568-3.20 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5957</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5957" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5957" ref_url="https://www.suse.com/security/cve/CVE-2017-5957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0902-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00119.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the "nr_cbufs" argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5957/">CVE-2017-5957</cve>
	<bugzilla href="https://bugzilla.suse.com/1024993">SUSE bug 1024993</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488212" comment="libvirglrenderer0-0.6.0-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488213" comment="virglrenderer-devel-0.6.0-2.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5967</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5967" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5967" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5967" ref_url="https://www.suse.com/security/cve/CVE-2017-5967" source="SUSE CVE"/>
    <description>
    The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list file, related to the print_timer function in kernel/time/timer_list.c and the __timer_stats_timer_set_start_info function in kernel/time/timer.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5967/">CVE-2017-5967</cve>
	<bugzilla href="https://bugzilla.suse.com/1025209">SUSE bug 1025209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5969</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5969" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5969" ref_url="https://www.suse.com/security/cve/CVE-2017-5969" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002977.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1746-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00000.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document.  NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5969/">CVE-2017-5969</cve>
	<bugzilla href="https://bugzilla.suse.com/1024989">SUSE bug 1024989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5972</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5972" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5972" ref_url="https://www.suse.com/security/cve/CVE-2017-5972" source="SUSE CVE"/>
    <description>
    The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an attack against the kernel-3.10.0 package in CentOS Linux 7. NOTE: third parties have been unable to discern any relationship between the GitHub Engineering finding and the Trigemini.c attack code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5972/">CVE-2017-5972</cve>
	<bugzilla href="https://bugzilla.suse.com/1026173">SUSE bug 1026173</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5973</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5973" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5973" ref_url="https://www.suse.com/security/cve/CVE-2017-5973" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0570-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0582-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5973/">CVE-2017-5973</cve>
	<bugzilla href="https://bugzilla.suse.com/1025109">SUSE bug 1025109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1025188">SUSE bug 1025188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5974</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5974" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5974" ref_url="https://www.suse.com/security/cve/CVE-2017-5974" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1210-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00025.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5974/">CVE-2017-5974</cve>
	<bugzilla href="https://bugzilla.suse.com/1024517">SUSE bug 1024517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481594" comment="libzzip-0-13-0.13.69-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481595" comment="zziplib-devel-0.13.69-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5975</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5975" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5975" ref_url="https://www.suse.com/security/cve/CVE-2017-5975" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1210-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00025.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5975/">CVE-2017-5975</cve>
	<bugzilla href="https://bugzilla.suse.com/1024528">SUSE bug 1024528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481594" comment="libzzip-0-13-0.13.69-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481595" comment="zziplib-devel-0.13.69-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5976</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5976" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5976" ref_url="https://www.suse.com/security/cve/CVE-2017-5976" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1210-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00025.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5976/">CVE-2017-5976</cve>
	<bugzilla href="https://bugzilla.suse.com/1024531">SUSE bug 1024531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481594" comment="libzzip-0-13-0.13.69-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481595" comment="zziplib-devel-0.13.69-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5977</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5977" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5977" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5977" ref_url="https://www.suse.com/security/cve/CVE-2017-5977" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1210-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00025.html" source="SUSE-SU"/>
    <description>
    The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5977/">CVE-2017-5977</cve>
	<bugzilla href="https://bugzilla.suse.com/1024534">SUSE bug 1024534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481594" comment="libzzip-0-13-0.13.69-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481595" comment="zziplib-devel-0.13.69-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5978</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5978" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5978" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5978" ref_url="https://www.suse.com/security/cve/CVE-2017-5978" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1210-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00025.html" source="SUSE-SU"/>
    <description>
    The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5978/">CVE-2017-5978</cve>
	<bugzilla href="https://bugzilla.suse.com/1024533">SUSE bug 1024533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481594" comment="libzzip-0-13-0.13.69-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481595" comment="zziplib-devel-0.13.69-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5979</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5979" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5979" ref_url="https://www.suse.com/security/cve/CVE-2017-5979" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1210-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00025.html" source="SUSE-SU"/>
    <description>
    The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5979/">CVE-2017-5979</cve>
	<bugzilla href="https://bugzilla.suse.com/1024535">SUSE bug 1024535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481594" comment="libzzip-0-13-0.13.69-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481595" comment="zziplib-devel-0.13.69-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5981</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5981" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5981" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5981" ref_url="https://www.suse.com/security/cve/CVE-2017-5981" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002826.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1210-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00025.html" source="SUSE-SU"/>
    <description>
    seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5981/">CVE-2017-5981</cve>
	<bugzilla href="https://bugzilla.suse.com/1024539">SUSE bug 1024539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481594" comment="libzzip-0-13-0.13.69-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481595" comment="zziplib-devel-0.13.69-3.3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5987</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5987" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5987" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5987" ref_url="https://www.suse.com/security/cve/CVE-2017-5987" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5987/">CVE-2017-5987</cve>
	<bugzilla href="https://bugzilla.suse.com/1025311">SUSE bug 1025311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5993</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5993" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5993" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5993" ref_url="https://www.suse.com/security/cve/CVE-2017-5993" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0902-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00119.html" source="SUSE-SU"/>
    <description>
    Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_CCMD_BLIT commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5993/">CVE-2017-5993</cve>
	<bugzilla href="https://bugzilla.suse.com/1025505">SUSE bug 1025505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488212" comment="libvirglrenderer0-0.6.0-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488213" comment="virglrenderer-devel-0.6.0-2.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5994</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-5994" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5994" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-5994" ref_url="https://www.suse.com/security/cve/CVE-2017-5994" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0902-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00119.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and crash) via the num_elements parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5994/">CVE-2017-5994</cve>
	<bugzilla href="https://bugzilla.suse.com/1025507">SUSE bug 1025507</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488212" comment="libvirglrenderer0-0.6.0-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488213" comment="virglrenderer-devel-0.6.0-2.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6001</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6001" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6001" ref_url="https://www.suse.com/security/cve/CVE-2017-6001" source="SUSE CVE"/>
    <description>
    Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a software group into a hardware context.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6786.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6001/">CVE-2017-6001</cve>
	<bugzilla href="https://bugzilla.suse.com/1015160">SUSE bug 1015160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1025626">SUSE bug 1025626</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6004</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6004" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6004" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6004" ref_url="https://www.suse.com/security/cve/CVE-2017-6004" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2021:499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009718.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009725.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:509-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009726.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3652-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009715.html" source="SUSE-SU"/>
    <description>
    The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted regular expression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6004/">CVE-2017-6004</cve>
	<bugzilla href="https://bugzilla.suse.com/1025709">SUSE bug 1025709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191803">SUSE bug 1191803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193384">SUSE bug 1193384</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480659" comment="libpcre16-0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480660" comment="libpcrecpp0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480661" comment="libpcrecpp0-32bit-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480662" comment="libpcreposix0-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480663" comment="pcre-devel-8.41-4.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480664" comment="pcre-tools-8.41-4.20 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176058" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6058</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6058" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6058" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6058" ref_url="https://www.suse.com/security/cve/CVE-2017-6058" source="SUSE CVE"/>
    <description>
    Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6058/">CVE-2017-6058</cve>
	<bugzilla href="https://bugzilla.suse.com/1025837">SUSE bug 1025837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6074</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6074" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6074" ref_url="https://www.suse.com/security/cve/CVE-2017-6074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2342-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="TID7018645" ref_url="https://www.suse.com/support/kb/doc/?id=7018645" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0541-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0547-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6074/">CVE-2017-6074</cve>
	<bugzilla href="https://bugzilla.suse.com/1026024">SUSE bug 1026024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072204">SUSE bug 1072204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6312</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6312" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6312" ref_url="https://www.suse.com/security/cve/CVE-2017-6312" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004484.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6312/">CVE-2017-6312</cve>
	<bugzilla href="https://bugzilla.suse.com/1027024">SUSE bug 1027024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1027026">SUSE bug 1027026</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335270" comment="gtk2-data is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335271" comment="gtk2-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335262" comment="gtk2-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335263" comment="gtk2-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335260" comment="gtk2-tools-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335264" comment="libgtk-2_0-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335261" comment="libgtk-2_0-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335265" comment="typelib-1_0-Gtk-2_0 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480251" comment="gdk-pixbuf-devel-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480252" comment="gdk-pixbuf-lang-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480253" comment="gdk-pixbuf-query-loaders-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480254" comment="gdk-pixbuf-thumbnailer-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480255" comment="libgdk_pixbuf-2_0-0-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480256" comment="typelib-1_0-GdkPixbuf-2_0-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482688" comment="gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482689" comment="libgdk_pixbuf-2_0-0-32bit-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6313</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6313" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6313" ref_url="https://www.suse.com/security/cve/CVE-2017-6313" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004484.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00021.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6313/">CVE-2017-6313</cve>
	<bugzilla href="https://bugzilla.suse.com/1027024">SUSE bug 1027024</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333994" comment="gdk-pixbuf is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335274" comment="gdk-pixbuf-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335266" comment="gdk-pixbuf-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335267" comment="gdk-pixbuf-query-loaders is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335272" comment="gdk-pixbuf-query-loaders-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340525" comment="gdk-pixbuf-thumbnailer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335268" comment="libgdk_pixbuf-2_0-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335273" comment="libgdk_pixbuf-2_0-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335269" comment="typelib-1_0-GdkPixbuf-2_0 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480251" comment="gdk-pixbuf-devel-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480252" comment="gdk-pixbuf-lang-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480253" comment="gdk-pixbuf-query-loaders-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480254" comment="gdk-pixbuf-thumbnailer-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480255" comment="libgdk_pixbuf-2_0-0-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480256" comment="typelib-1_0-GdkPixbuf-2_0-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009482688" comment="gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482689" comment="libgdk_pixbuf-2_0-0-32bit-2.36.11-3.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6314</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6314" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6314" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6314" ref_url="https://www.suse.com/security/cve/CVE-2017-6314" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2381-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004484.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2393-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00021.html" source="SUSE-SU"/>
    <description>
    The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6314/">CVE-2017-6314</cve>
	<bugzilla href="https://bugzilla.suse.com/1027024">SUSE bug 1027024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1027025">SUSE bug 1027025</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335274" comment="gdk-pixbuf-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335266" comment="gdk-pixbuf-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335267" comment="gdk-pixbuf-query-loaders is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335272" comment="gdk-pixbuf-query-loaders-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340525" comment="gdk-pixbuf-thumbnailer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335268" comment="libgdk_pixbuf-2_0-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335273" comment="libgdk_pixbuf-2_0-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335269" comment="typelib-1_0-GdkPixbuf-2_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335270" comment="gtk2-data is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335271" comment="gtk2-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335262" comment="gtk2-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335263" comment="gtk2-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335260" comment="gtk2-tools-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335264" comment="libgtk-2_0-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335261" comment="libgtk-2_0-0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335265" comment="typelib-1_0-Gtk-2_0 is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6318</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6318" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6318" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6318" ref_url="https://www.suse.com/security/cve/CVE-2017-6318" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002700.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:3125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007683.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0649-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00016.html" source="SUSE-SU"/>
    <description>
    saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONTROL_OPTION packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-6318/">CVE-2017-6318</cve>
	<bugzilla href="https://bugzilla.suse.com/1027197">SUSE bug 1027197</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486544" comment="sane-backends-1.0.27-4.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486545" comment="sane-backends-autoconfig-1.0.27-4.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486546" comment="sane-backends-devel-1.0.27-4.27 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6345</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6345" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6345" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6345" ref_url="https://www.suse.com/security/cve/CVE-2017-6345" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00001.html" source="SUSE-SU"/>
    <description>
    The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circumstances, which allows local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6345/">CVE-2017-6345</cve>
	<bugzilla href="https://bugzilla.suse.com/1027179">SUSE bug 1027179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1027190">SUSE bug 1027190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6348</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6348" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6348" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6348" ref_url="https://www.suse.com/security/cve/CVE-2017-6348" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2342-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00000.html" source="SUSE-SU"/>
    <description>
    The hashbin_delete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial of service (deadlock) via crafted operations on IrDA devices.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6348/">CVE-2017-6348</cve>
	<bugzilla href="https://bugzilla.suse.com/1027178">SUSE bug 1027178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6349</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6349" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6349" ref_url="https://www.suse.com/security/cve/CVE-2017-6349" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013343.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1811-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00039.html" source="SUSE-SU"/>
    <description>
    An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6349/">CVE-2017-6349</cve>
	<bugzilla href="https://bugzilla.suse.com/1027057">SUSE bug 1027057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482738" comment="gvim-8.0.1568-3.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480954" comment="vim-8.0.1568-3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480955" comment="vim-data-8.0.1568-3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480956" comment="vim-data-common-8.0.1568-3.20 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6350</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6350" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6350" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6350" ref_url="https://www.suse.com/security/cve/CVE-2017-6350" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-June/002990.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013343.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1811-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-07/msg00039.html" source="SUSE-SU"/>
    <description>
    An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6350/">CVE-2017-6350</cve>
	<bugzilla href="https://bugzilla.suse.com/1027053">SUSE bug 1027053</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009482738" comment="gvim-8.0.1568-3.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480954" comment="vim-8.0.1568-3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480955" comment="vim-data-8.0.1568-3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480956" comment="vim-data-common-8.0.1568-3.20 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6353</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6353" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6353" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6353" ref_url="https://www.suse.com/security/cve/CVE-2017-6353" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1183-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1247-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1301-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1990-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2342-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2525-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0906-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0907-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00001.html" source="SUSE-SU"/>
    <description>
    net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service (invalid unlock and double free) via a multithreaded application.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-5986.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-02-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6353/">CVE-2017-6353</cve>
	<bugzilla href="https://bugzilla.suse.com/1025235">SUSE bug 1025235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1027066">SUSE bug 1027066</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338037" comment="reiserfs-kmp-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6362</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6362" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6362" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6362" ref_url="https://www.suse.com/security/cve/CVE-2017-6362" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003613.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-01/msg00054.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6362/">CVE-2017-6362</cve>
	<bugzilla href="https://bugzilla.suse.com/1056993">SUSE bug 1056993</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486604" comment="gd-2.2.5-4.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486605" comment="gd-devel-2.2.5-4.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6386</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6386" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6386" ref_url="https://www.suse.com/security/cve/CVE-2017-6386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002738.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0902-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00119.html" source="SUSE-SU"/>
    <description>
    Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_OBJECT_VERTEX_ELEMENTS commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6386/">CVE-2017-6386</cve>
	<bugzilla href="https://bugzilla.suse.com/1027376">SUSE bug 1027376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488212" comment="libvirglrenderer0-0.6.0-2.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488213" comment="virglrenderer-devel-0.6.0-2.30 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6414</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6414" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6414" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6414" ref_url="https://www.suse.com/security/cve/CVE-2017-6414" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00006.html" source="SUSE-SU"/>
    <description>
    Memory leak in the vcard_apdu_new function in card_7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service (host memory consumption) via vectors related to allocating a new APDU object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6414/">CVE-2017-6414</cve>
	<bugzilla href="https://bugzilla.suse.com/1027514">SUSE bug 1027514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1027570">SUSE bug 1027570</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333988" comment="qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335414" comment="qemu-arm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336533" comment="qemu-audio-alsa is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336534" comment="qemu-audio-oss is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336535" comment="qemu-audio-pa is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335210" comment="qemu-block-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335211" comment="qemu-block-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335248" comment="qemu-block-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335212" comment="qemu-block-ssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335213" comment="qemu-guest-agent is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335214" comment="qemu-ipxe is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335243" comment="qemu-kvm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335215" comment="qemu-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335244" comment="qemu-seabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335245" comment="qemu-sgabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335217" comment="qemu-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336537" comment="qemu-ui-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336538" comment="qemu-ui-gtk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335218" comment="qemu-vgabios is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335246" comment="qemu-x86 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333937" comment="xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334824" comment="xen-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334819" comment="xen-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334822" comment="xen-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334823" comment="xen-tools-domU is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488172" comment="libcacard-devel-2.5.3-1.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488173" comment="libcacard0-2.5.3-1.27 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6418</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6418" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6418" ref_url="https://www.suse.com/security/cve/CVE-2017-6418" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
    <description>
    libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6418/">CVE-2017-6418</cve>
	<bugzilla href="https://bugzilla.suse.com/1052466">SUSE bug 1052466</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6419</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6419" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6419" ref_url="https://www.suse.com/security/cve/CVE-2017-6419" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0809-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0863-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00062.html" source="SUSE-SU"/>
    <description>
    mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6419/">CVE-2017-6419</cve>
	<bugzilla href="https://bugzilla.suse.com/1052449">SUSE bug 1052449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083915">SUSE bug 1083915</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481437" comment="libmspack-devel-0.6-3.3.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481438" comment="libmspack0-0.6-3.3.11 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6420</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6420" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6420" ref_url="https://www.suse.com/security/cve/CVE-2017-6420" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00078.html" source="SUSE-SU"/>
    <description>
    The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6420/">CVE-2017-6420</cve>
	<bugzilla href="https://bugzilla.suse.com/1052448">SUSE bug 1052448</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481060" comment="clamav-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481061" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481062" comment="libclamav7-0.100.3-3.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481063" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6435</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6435" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6435" ref_url="https://www.suse.com/security/cve/CVE-2017-6435" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00082.html" source="SUSE-SU"/>
    <description>
    The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6435/">CVE-2017-6435</cve>
	<bugzilla href="https://bugzilla.suse.com/1029639">SUSE bug 1029639</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486486" comment="libplist++-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486487" comment="libplist++3-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486488" comment="libplist-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6436</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6436" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6436" ref_url="https://www.suse.com/security/cve/CVE-2017-6436" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00082.html" source="SUSE-SU"/>
    <description>
    The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6436/">CVE-2017-6436</cve>
	<bugzilla href="https://bugzilla.suse.com/1029751">SUSE bug 1029751</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486486" comment="libplist++-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486487" comment="libplist++3-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486488" comment="libplist-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6437</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6437" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6437" ref_url="https://www.suse.com/security/cve/CVE-2017-6437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00082.html" source="SUSE-SU"/>
    <description>
    The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6437/">CVE-2017-6437</cve>
	<bugzilla href="https://bugzilla.suse.com/1029707">SUSE bug 1029707</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486486" comment="libplist++-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486487" comment="libplist++3-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486488" comment="libplist-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6438</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6438" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6438" ref_url="https://www.suse.com/security/cve/CVE-2017-6438" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00082.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) and possibly code execution via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6438/">CVE-2017-6438</cve>
	<bugzilla href="https://bugzilla.suse.com/1029706">SUSE bug 1029706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486486" comment="libplist++-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486487" comment="libplist++3-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486488" comment="libplist-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6439</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6439" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6439" ref_url="https://www.suse.com/security/cve/CVE-2017-6439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003143.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2208-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-08/msg00082.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6439/">CVE-2017-6439</cve>
	<bugzilla href="https://bugzilla.suse.com/1029638">SUSE bug 1029638</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486486" comment="libplist++-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486487" comment="libplist++3-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486488" comment="libplist-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6440</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6440" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6440" ref_url="https://www.suse.com/security/cve/CVE-2017-6440" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002907.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002908.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1426-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00094.html" source="SUSE-SU"/>
    <description>
    The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6440/">CVE-2017-6440</cve>
	<bugzilla href="https://bugzilla.suse.com/1029631">SUSE bug 1029631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1029706">SUSE bug 1029706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486486" comment="libplist++-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486487" comment="libplist++3-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486488" comment="libplist-devel-2.0.0-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6451</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6451" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6451" ref_url="https://www.suse.com/security/cve/CVE-2017-6451" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002813.html" source="SUSE-SU"/>
    <description>
    The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6451/">CVE-2017-6451</cve>
	<bugzilla href="https://bugzilla.suse.com/1030050">SUSE bug 1030050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6458</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6458" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6458" ref_url="https://www.suse.com/security/cve/CVE-2017-6458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002813.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6458/">CVE-2017-6458</cve>
	<bugzilla href="https://bugzilla.suse.com/1030050">SUSE bug 1030050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038049">SUSE bug 1038049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044525">SUSE bug 1044525</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6460</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6460" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6460" ref_url="https://www.suse.com/security/cve/CVE-2017-6460" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002813.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6460/">CVE-2017-6460</cve>
	<bugzilla href="https://bugzilla.suse.com/1030050">SUSE bug 1030050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038049">SUSE bug 1038049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044525">SUSE bug 1044525</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6462</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6462" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6462" ref_url="https://www.suse.com/security/cve/CVE-2017-6462" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002813.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6462/">CVE-2017-6462</cve>
	<bugzilla href="https://bugzilla.suse.com/1030050">SUSE bug 1030050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038049">SUSE bug 1038049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044525">SUSE bug 1044525</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6463</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6463" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6463" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6463" ref_url="https://www.suse.com/security/cve/CVE-2017-6463" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002813.html" source="SUSE-SU"/>
    <description>
    NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6463/">CVE-2017-6463</cve>
	<bugzilla href="https://bugzilla.suse.com/1030050">SUSE bug 1030050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038049">SUSE bug 1038049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044525">SUSE bug 1044525</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6464</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6464" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6464" ref_url="https://www.suse.com/security/cve/CVE-2017-6464" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002811.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002812.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002813.html" source="SUSE-SU"/>
    <description>
    NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6464/">CVE-2017-6464</cve>
	<bugzilla href="https://bugzilla.suse.com/1030050">SUSE bug 1030050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038049">SUSE bug 1038049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044525">SUSE bug 1044525</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488057" comment="ntp-4.2.8p13-4.6.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6467</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6467" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6467" ref_url="https://www.suse.com/security/cve/CVE-2017-6467" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0664-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6467/">CVE-2017-6467</cve>
	<bugzilla href="https://bugzilla.suse.com/1027998">SUSE bug 1027998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148181">SUSE bug 1148181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6468</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6468" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6468" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6468" ref_url="https://www.suse.com/security/cve/CVE-2017-6468" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0664-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6468/">CVE-2017-6468</cve>
	<bugzilla href="https://bugzilla.suse.com/1027998">SUSE bug 1027998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148182">SUSE bug 1148182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6469</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6469" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6469" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6469" ref_url="https://www.suse.com/security/cve/CVE-2017-6469" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0664-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-ldss.c by ensuring that memory is allocated for a certain data structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6469/">CVE-2017-6469</cve>
	<bugzilla href="https://bugzilla.suse.com/1027998">SUSE bug 1027998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148185">SUSE bug 1148185</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6470</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6470" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6470" ref_url="https://www.suse.com/security/cve/CVE-2017-6470" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0664-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by constraining packet lateness.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6470/">CVE-2017-6470</cve>
	<bugzilla href="https://bugzilla.suse.com/1027998">SUSE bug 1027998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148186">SUSE bug 1148186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6471</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6471" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6471" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6471" ref_url="https://www.suse.com/security/cve/CVE-2017-6471" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0664-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6471/">CVE-2017-6471</cve>
	<bugzilla href="https://bugzilla.suse.com/1027998">SUSE bug 1027998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148187">SUSE bug 1148187</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6472</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6472" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6472" ref_url="https://www.suse.com/security/cve/CVE-2017-6472" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0664-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6472/">CVE-2017-6472</cve>
	<bugzilla href="https://bugzilla.suse.com/1027998">SUSE bug 1027998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148188">SUSE bug 1148188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6473</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6473" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6473" ref_url="https://www.suse.com/security/cve/CVE-2017-6473" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0664-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6473/">CVE-2017-6473</cve>
	<bugzilla href="https://bugzilla.suse.com/1027998">SUSE bug 1027998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148189">SUSE bug 1148189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6474</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6474" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6474" ref_url="https://www.suse.com/security/cve/CVE-2017-6474" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2017:0664-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html" source="SUSE-SU"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6474/">CVE-2017-6474</cve>
	<bugzilla href="https://bugzilla.suse.com/1027998">SUSE bug 1027998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148191">SUSE bug 1148191</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6505</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6505" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6505" ref_url="https://www.suse.com/security/cve/CVE-2017-6505" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1081-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1147-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1774-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2963-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1078-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1872-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00023.html" source="SUSE-SU"/>
    <description>
    The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6505/">CVE-2017-6505</cve>
	<bugzilla href="https://bugzilla.suse.com/1028184">SUSE bug 1028184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028235">SUSE bug 1028235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178658">SUSE bug 1178658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6507</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6507" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6507" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6507" ref_url="https://www.suse.com/security/cve/CVE-2017-6507" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002841.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0969-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00011.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppArmor. This is due to the common logic to handle 'restart' operations removing AppArmor profiles that aren't found in the typical filesystem locations, such as /etc/apparmor.d/. Userspace projects that manage their own AppArmor profiles in atypical directories, such as what's done by LXD and Docker, are affected by this flaw in the AppArmor init script logic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-6507/">CVE-2017-6507</cve>
	<bugzilla href="https://bugzilla.suse.com/1029696">SUSE bug 1029696</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488309" comment="apache2-mod_apparmor-2.12.2-7.17.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480990" comment="apparmor-abstractions-2.12.2-7.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480991" comment="apparmor-docs-2.12.2-7.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480992" comment="apparmor-parser-2.12.2-7.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480993" comment="apparmor-parser-lang-2.12.2-7.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480994" comment="apparmor-profiles-2.12.2-7.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480995" comment="apparmor-utils-2.12.2-7.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480996" comment="apparmor-utils-lang-2.12.2-7.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480997" comment="pam_apparmor-2.12.2-7.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480998" comment="pam_apparmor-32bit-2.12.2-7.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480999" comment="perl-apparmor-2.12.2-7.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481000" comment="python3-apparmor-2.12.2-7.17.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6508</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6508" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6508" ref_url="https://www.suse.com/security/cve/CVE-2017-6508" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002739.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002740.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0890-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00113.html" source="SUSE-SU"/>
    <description>
    CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-6508/">CVE-2017-6508</cve>
	<bugzilla href="https://bugzilla.suse.com/1028301">SUSE bug 1028301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159418">SUSE bug 1159418</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481671" comment="wget-1.19.5-3.6.2 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6512</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6512" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6512" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6512" ref_url="https://www.suse.com/security/cve/CVE-2017-6512" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012224.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012235.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2242-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012238.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012239.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012240.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012241.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012242.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012243.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2250-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012244.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012245.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012246.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012247.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2255-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012248.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2256-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012253.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012254.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012275.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2288-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012276.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2289-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012277.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2290-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2291-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012279.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012281.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012282.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2297-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012295.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012307.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012308.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012310.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012311.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012312.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012314.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2314-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012315.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012317.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012323.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012334.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2333-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012335.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2334-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012336.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012337.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012338.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012340.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012342.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012344.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012345.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012425.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012433.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012634.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012650.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2659-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012651.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2660-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012652.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012653.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2662-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012654.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2663-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012655.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2664-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012656.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2666-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012672.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012673.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012674.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2701-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012675.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012676.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012690.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012691.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:2731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013171.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013173.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:3269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013177.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014450.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014451.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013694.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:322-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:323-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013695.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:324-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013692.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012298.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012300.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012587.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2022:1118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012606.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2951-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003383.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003416.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-January/003580.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:0449-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012233.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3101-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-11/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving directory-permission loosening logic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-6512/">CVE-2017-6512</cve>
	<bugzilla href="https://bugzilla.suse.com/1042218">SUSE bug 1042218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1047178">SUSE bug 1047178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486521" comment="perl-File-Path-2.150000-1.22 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6590</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6590" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6590" ref_url="https://www.suse.com/security/cve/CVE-2017-6590" source="SUSE CVE"/>
    <description>
    An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation requires physical access to the locked computer and the Wi-Fi must be turned on. An access point that lets you use a certificate to login is required as well, but it's easy to create one. Then, it's possible to open a nautilus window and browse directories. One also can open some applications such as Firefox, which is useful for downloading malicious binaries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6590/">CVE-2017-6590</cve>
	<bugzilla href="https://bugzilla.suse.com/1028792">SUSE bug 1028792</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486475" comment="libnm-gtk-devel-1.8.10-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486476" comment="libnm-gtk0-1.8.10-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486477" comment="libnma-devel-1.8.10-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486478" comment="libnma0-1.8.10-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486479" comment="nma-data-1.8.10-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486480" comment="typelib-1_0-NMA-1_0-1.8.10-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486481" comment="typelib-1_0-NMGtk-1_0-1.8.10-3.39 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009488874" comment="NetworkManager-applet-1.8.10-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488875" comment="NetworkManager-applet-lang-1.8.10-3.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009488876" comment="NetworkManager-connection-editor-1.8.10-3.39 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6827</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6827" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6827" ref_url="https://www.suse.com/security/cve/CVE-2017-6827" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6827/">CVE-2017-6827</cve>
	<bugzilla href="https://bugzilla.suse.com/1026979">SUSE bug 1026979</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6828</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6828" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6828" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6828" ref_url="https://www.suse.com/security/cve/CVE-2017-6828" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6828/">CVE-2017-6828</cve>
	<bugzilla href="https://bugzilla.suse.com/1026980">SUSE bug 1026980</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6829</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6829" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6829" ref_url="https://www.suse.com/security/cve/CVE-2017-6829" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6829/">CVE-2017-6829</cve>
	<bugzilla href="https://bugzilla.suse.com/1026981">SUSE bug 1026981</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6830</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6830" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6830" ref_url="https://www.suse.com/security/cve/CVE-2017-6830" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6830/">CVE-2017-6830</cve>
	<bugzilla href="https://bugzilla.suse.com/1026982">SUSE bug 1026982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6831</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6831" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6831" ref_url="https://www.suse.com/security/cve/CVE-2017-6831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-07-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6831/">CVE-2017-6831</cve>
	<bugzilla href="https://bugzilla.suse.com/1026983">SUSE bug 1026983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6832</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6832" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6832" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6832" ref_url="https://www.suse.com/security/cve/CVE-2017-6832" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6832/">CVE-2017-6832</cve>
	<bugzilla href="https://bugzilla.suse.com/1026984">SUSE bug 1026984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6833</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6833" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6833" ref_url="https://www.suse.com/security/cve/CVE-2017-6833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6833/">CVE-2017-6833</cve>
	<bugzilla href="https://bugzilla.suse.com/1026985">SUSE bug 1026985</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6834</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6834" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6834" ref_url="https://www.suse.com/security/cve/CVE-2017-6834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6834/">CVE-2017-6834</cve>
	<bugzilla href="https://bugzilla.suse.com/1026986">SUSE bug 1026986</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6835</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6835" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6835" ref_url="https://www.suse.com/security/cve/CVE-2017-6835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6835/">CVE-2017-6835</cve>
	<bugzilla href="https://bugzilla.suse.com/1026988">SUSE bug 1026988</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6836</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6836" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6836" ref_url="https://www.suse.com/security/cve/CVE-2017-6836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6836/">CVE-2017-6836</cve>
	<bugzilla href="https://bugzilla.suse.com/1026987">SUSE bug 1026987</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6837</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6837" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6837" ref_url="https://www.suse.com/security/cve/CVE-2017-6837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coefficients.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6837/">CVE-2017-6837</cve>
	<bugzilla href="https://bugzilla.suse.com/1026978">SUSE bug 1026978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6838</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6838" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6838" ref_url="https://www.suse.com/security/cve/CVE-2017-6838" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6838/">CVE-2017-6838</cve>
	<bugzilla href="https://bugzilla.suse.com/1026978">SUSE bug 1026978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6839</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6839" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6839" ref_url="https://www.suse.com/security/cve/CVE-2017-6839" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0940-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002783.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1182-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-May/002846.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1038-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00064.html" source="SUSE-SU"/>
    <description>
    Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6839/">CVE-2017-6839</cve>
	<bugzilla href="https://bugzilla.suse.com/1026978">SUSE bug 1026978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6850</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6850" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6850" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6850" ref_url="https://www.suse.com/security/cve/CVE-2017-6850" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002789.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1034-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00061.html" source="SUSE-SU"/>
    <description>
    The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6850/">CVE-2017-6850</cve>
	<bugzilla href="https://bugzilla.suse.com/1021868">SUSE bug 1021868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6852</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6852" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6852" ref_url="https://www.suse.com/security/cve/CVE-2017-6852" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6852/">CVE-2017-6852</cve>
	<bugzilla href="https://bugzilla.suse.com/1021871">SUSE bug 1021871</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335448" comment="libjasper-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659674" comment="libjasper4 is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176886" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6886</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6886" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6886" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6886" ref_url="https://www.suse.com/security/cve/CVE-2017-6886" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003170.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00111.html" source="SUSE-SU"/>
    <description>
    An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6886/">CVE-2017-6886</cve>
	<bugzilla href="https://bugzilla.suse.com/1039380">SUSE bug 1039380</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489076" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489077" comment="libraw16-0.18.9-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176887" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6887</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6887" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6887" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6887" ref_url="https://www.suse.com/security/cve/CVE-2017-6887" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003170.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00111.html" source="SUSE-SU"/>
    <description>
    A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6887/">CVE-2017-6887</cve>
	<bugzilla href="https://bugzilla.suse.com/1039379">SUSE bug 1039379</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489076" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489077" comment="libraw16-0.18.9-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6888</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6888" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6888" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6888" ref_url="https://www.suse.com/security/cve/CVE-2017-6888" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:0920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005317.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:1120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1225-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-04/msg00069.html" source="SUSE-SU"/>
    <description>
    An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-12"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6888/">CVE-2017-6888</cve>
	<bugzilla href="https://bugzilla.suse.com/1091045">SUSE bug 1091045</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009782740" comment="flac-devel-1.3.2-3.3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009782741" comment="libFLAC++6-1.3.2-3.3.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009675245" comment="libFLAC8-1.3.2-3.3.20 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176890" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6890</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6890" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6890" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6890" ref_url="https://www.suse.com/security/cve/CVE-2017-6890" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003170.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-05/msg00111.html" source="SUSE-SU"/>
    <description>
    A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-05-22"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6890/">CVE-2017-6890</cve>
	<bugzilla href="https://bugzilla.suse.com/1039209">SUSE bug 1039209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489076" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489077" comment="libraw16-0.18.9-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176891" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6891</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6891" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6891" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6891" ref_url="https://www.suse.com/security/cve/CVE-2017-6891" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1379-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005515.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3797-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012726.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1510-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00018.html" source="SUSE-SU"/>
    <description>
    Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6891/">CVE-2017-6891</cve>
	<bugzilla href="https://bugzilla.suse.com/1040621">SUSE bug 1040621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149679">SUSE bug 1149679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334127" comment="libtasn1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336122" comment="libtasn1-6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336123" comment="libtasn1-6-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336124" comment="libtasn1-devel is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176892" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6892</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6892" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6892" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6892" ref_url="https://www.suse.com/security/cve/CVE-2017-6892" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-February/003705.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0388-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-02/msg00018.html" source="SUSE-SU"/>
    <description>
    In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6892/">CVE-2017-6892</cve>
	<bugzilla href="https://bugzilla.suse.com/1043978">SUSE bug 1043978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481480" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6899</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6899" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6899" ref_url="https://www.suse.com/security/cve/CVE-2017-6899" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-August/003170.html" source="SUSE-SU"/>
    <description>
    The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6899/">CVE-2017-6899</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009489076" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009489077" comment="libraw16-0.18.9-3.8.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6965</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6965" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6965" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6965" ref_url="https://www.suse.com/security/cve/CVE-2017-6965" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-09-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6965/">CVE-2017-6965</cve>
	<bugzilla href="https://bugzilla.suse.com/1029909">SUSE bug 1029909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335833" comment="binutils-gold is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334069" comment="binutils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335832" comment="binutils-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337413" comment="binutils-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342534" comment="libctf-nobfd0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009342535" comment="libctf0 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6966</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6966" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6966" ref_url="https://www.suse.com/security/cve/CVE-2017-6966" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6966/">CVE-2017-6966</cve>
	<bugzilla href="https://bugzilla.suse.com/1029908">SUSE bug 1029908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6967</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6967" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6967" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6967" ref_url="https://www.suse.com/security/cve/CVE-2017-6967" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005708.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005721.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:1943-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007149.html" source="SUSE-SU"/>
    <description>
    xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pam_limits.so bypass.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6967/">CVE-2017-6967</cve>
	<bugzilla href="https://bugzilla.suse.com/1029912">SUSE bug 1029912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/442182">SUSE bug 442182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009480650" comment="libpainter0-0.9.6-2.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480651" comment="librfxencode0-0.9.6-2.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480652" comment="xrdp-0.9.6-2.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009480653" comment="xrdp-devel-0.9.6-2.17 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6969</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-6969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6969" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-6969" ref_url="https://www.suse.com/security/cve/CVE-2017-6969" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3170-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004683.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:3207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-October/004694.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3199-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:3223-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-10/msg00039.html" source="SUSE-SU"/>
    <description>
    readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2023-04-19"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6969/">CVE-2017-6969</cve>
	<bugzilla href="https://bugzilla.suse.com/1029907">SUSE bug 1029907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030295">SUSE bug 1030295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1030296">SUSE bug 1030296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105209">SUSE bug 1105209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7006</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7006" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7006" ref_url="https://www.suse.com/security/cve/CVE-2017-7006" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct a timing side-channel attack to bypass the Same Origin Policy and obtain sensitive information via a crafted web site that uses SVG filters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7006/">CVE-2017-7006</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7011</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7011" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7011" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7011" ref_url="https://www.suse.com/security/cve/CVE-2017-7011" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site that uses FRAME elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7011/">CVE-2017-7011</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7012</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7012" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7012" ref_url="https://www.suse.com/security/cve/CVE-2017-7012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7012/">CVE-2017-7012</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7018</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7018" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7018" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7018" ref_url="https://www.suse.com/security/cve/CVE-2017-7018" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7018/">CVE-2017-7018</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7019</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7019" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7019" ref_url="https://www.suse.com/security/cve/CVE-2017-7019" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit Page Loading" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7019/">CVE-2017-7019</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7020</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7020" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7020" ref_url="https://www.suse.com/security/cve/CVE-2017-7020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7020/">CVE-2017-7020</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7030</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7030" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7030" ref_url="https://www.suse.com/security/cve/CVE-2017-7030" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7030/">CVE-2017-7030</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7034</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7034" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7034" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7034" ref_url="https://www.suse.com/security/cve/CVE-2017-7034" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7034/">CVE-2017-7034</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7037</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7037" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7037" ref_url="https://www.suse.com/security/cve/CVE-2017-7037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7037/">CVE-2017-7037</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7038</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7038" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7038" ref_url="https://www.suse.com/security/cve/CVE-2017-7038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7038/">CVE-2017-7038</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7039</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7039" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7039" ref_url="https://www.suse.com/security/cve/CVE-2017-7039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7039/">CVE-2017-7039</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7040</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7040" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7040" ref_url="https://www.suse.com/security/cve/CVE-2017-7040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7040/">CVE-2017-7040</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7041</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7041" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7041" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7041" ref_url="https://www.suse.com/security/cve/CVE-2017-7041" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7041/">CVE-2017-7041</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7042</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7042" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7042" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7042" ref_url="https://www.suse.com/security/cve/CVE-2017-7042" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7042/">CVE-2017-7042</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7043</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7043" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7043" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7043" ref_url="https://www.suse.com/security/cve/CVE-2017-7043" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7043/">CVE-2017-7043</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7046</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7046" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7046" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7046" ref_url="https://www.suse.com/security/cve/CVE-2017-7046" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7046/">CVE-2017-7046</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7048</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7048" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7048" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7048" ref_url="https://www.suse.com/security/cve/CVE-2017-7048" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2933-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:2991-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7048/">CVE-2017-7048</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7049</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7049" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7049" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7049" ref_url="https://www.suse.com/security/cve/CVE-2017-7049" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7049/">CVE-2017-7049</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7052</title>
    <affected family="unix">
            <platform>SUSE Enterprise Storage 6</platform>
            <platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
            <platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server 15 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
            <platform>SUSE Manager Proxy 4.0</platform>
            <platform>SUSE Manager Retail Branch Server 4.0</platform>
            <platform>SUSE Manager Server 4.0</platform>
    </affected>
    <reference ref_id="Mitre CVE-2017-7052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7052" source="CVE"/>
    <reference ref_id="SUSE CVE-2017-7052" ref_url="https://www.suse.com/security/cve/CVE-2017-7052" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0219-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00106.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-22"/>
	<updated date="2022-11-09"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7052/">CVE-2017-7052</cve>
	<bugzilla href="https://bugzilla.suse.com/1050469">SUSE bug 1050469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security: